Boxlite vulnerabilities

Vulnerability in Boxlite before version 0.9.0. Users can specify OCI images, and when processing tar entries, symlinks to absolute paths are not checked. An attacker can host a malicious image on DockerHub, allowing arbitrary file writes on the host and remote code execution.

Boxlite prior to version 0.9.0 does not restrict kernel capabilities inside the container, allowing malicious code to remount directories in rw mode and gain write access to read-only directories. Fixed in version 0.9.0.

Boxlite in versions 0.8.2 and prior uses SIGALRM instead of SIGKILL to kill processes after a timeout. Malicious code inside the sandbox can catch this signal and continue running, leading to resource exhaustion and affecting the availability of the Boxlite service.