CVE-2021-32760

🗓️ 19 Jul 2021 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 537 Views🌐 WEB

containerd < 1.4.8/1.5.4 Unix file permission bu

Reporter	Title	Published	Views	Family All 133
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2021-32760)	6 Aug 202110:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse® on Cloud Pak for Data	19 Apr 202420:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	26 Mar 202503:52	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	1 Mar 202419:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities	31 May 202305:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
GithubExploit	Exploit for Exposure of Resource to Wrong Sphere in Linuxfoundation Containerd	29 Mar 202619:15	–	githubexploit
GithubExploit	Exploit for Exposure of Resource to Wrong Sphere in Linuxfoundation Containerd	29 Mar 202619:03	–	githubexploit

NVD

Vulners

Node

linuxfoundation containerdRange<1.4.8

linuxfoundation containerdRange1.5.0–1.5.4

Node

fedoraproject fedoraMatch34

[
  {
    "vendor": "containerd",
    "product": "containerd",
    "versions": [
      {
        "version": "<= 1.4.7",
        "status": "affected"
      },
      {
        "version": ">= 1.5.0, <= 1.5.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w
github	www.github.com/containerd/containerd/releases/tag/v1.4.8
security	www.security.gentoo.org/glsa/202401-31
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDMNDPJJTP3J5GOEDB66F6MGXUTRG3Y3/
github	www.github.com/containerd/containerd/releases/tag/v1.5.4

Parameter	Position	Path	Description	CWE
hdr.Linkname	path	/var/lib/containerd/.../rootfs/escape	ZipSlip-style symlink created during image extraction to escape extraction directory and access host filesystem	CWE-668, CWE-732

17 Jun 2026 03:53Current

6Medium risk

Vulners AI Score6

CVSS 3.15 - 6.3

CVSS 26.8

EPSS0.01608

SSVC