The vulnerability of the Containerd execution environment, related to deficiencies in authentication procedures, allows attackers to disclose protected information.

🗓️ 04 Apr 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Containerd authentication weaknesses in its runtime allow remote attackers to disclose protected data.

Reporter	Title	Published	Views	Family All 146
0day.today	containerd Image Volume Insecure Handling Exploit	24 Mar 202200:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-23648)	18 Mar 202218:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	13 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console (CVE-2022-23648, CVE-2022-32149)	3 Jul 202509:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse® on Cloud Pak for Data	19 Apr 202420:11	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	1 Mar 202419:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities	31 May 202305:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from containerd, gnupg2, runc and IBM WebSphere Application Server Liberty	20 Oct 202212:19	–	ibm

Vulners

Node

novell suse_linux_enterprise_microMatch5.0

OR

novell suse_linux_enterprise_microMatch5.1

OR

cloud_native_computing containerdRange<1.4.13

OR

cloud_native_computing containerdRange1.5.0–1.5.10

OR

cloud_native_computing containerdRange1.6.0–1.6.1

OR

fedora fedoraMatch34

OR

novell opensuse_leapMatch15.3

OR

fedora fedoraMatch35

OR

canonical ubuntuMatch21.10

OR

novell suse_linux_enterprise_serverMatch12

OR

novell opensuse_leapMatch15.4

OR

fedora fedoraMatch36

Source	Link
github	www.github.com/containerd/containerd/commit/10f428dac7cec44c864e1b830a4623af27a9fc70
github	www.github.com/containerd/containerd/releases/tag/v1.4.13
github	www.github.com/containerd/containerd/releases/tag/v1.5.10
github	www.github.com/containerd/containerd/releases/tag/v1.6.1
github	www.github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7
packetstormsecurity	www.packetstormsecurity.com/files/166421/containerd-Image-Volume-Insecure-Handling.html
debian	www.debian.org/security/2022/dsa-5091
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-23648
ubuntu	www.ubuntu.com/security/CVE-2022-23648
ubuntu	www.ubuntu.com/security/notices/USN-5311-1

30 Sep 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 37.5

CVSS 27.8

EPSS0.27392

Containerd vulnerability authentication weakness remote attackers protected data Containerd runtime