CVE-2022-23648

🗓️ 03 Mar 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 529 Views🌐 WEB

containerd CRI bug allows read-only access to host file

Reporter	Title	Published	Views	Family All 145
0day.today	containerd Image Volume Insecure Handling Exploit	24 Mar 202200:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-23648)	18 Mar 202218:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	13 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console (CVE-2022-23648, CVE-2022-32149)	3 Jul 202509:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse® on Cloud Pak for Data	19 Apr 202420:11	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	1 Mar 202419:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities	31 May 202305:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from containerd, gnupg2, runc and IBM WebSphere Application Server Liberty	20 Oct 202212:19	–	ibm

NVD

Vulners

Node

linuxfoundation containerdRange<1.4.13

linuxfoundation containerdRange1.5.0–1.5.10

linuxfoundation containerdRange1.6.0–1.6.1

Node

debian debian_linuxMatch11.0

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

[
  {
    "vendor": "containerd",
    "product": "containerd",
    "versions": [
      {
        "version": "< 1.4.13",
        "status": "affected"
      },
      {
        "version": ">= 1.5.0, < 1.5.10",
        "status": "affected"
      },
      {
        "version": ">= 1.6.0, < 1.6.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/containerd/containerd/releases/tag/v1.6.1
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFTS2EF3S7HNYSNZSEJZIJHPRU7OPUV3/
github	www.github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7
debian	www.debian.org/security/2022/dsa-5091
packetstormsecurity	www.packetstormsecurity.com/files/166421/containerd-Image-Volume-Insecure-Handling.html
security	www.security.gentoo.org/glsa/202401-31
github	www.github.com/containerd/containerd/releases/tag/v1.4.13
github	www.github.com/containerd/containerd/releases/tag/v1.5.10
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OCCARJ6FU4MWBTXHZNMS7NELPDBIX2VO/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUDQUQBZJGBWJPMRVB6QCCCRF7O3O4PA/

Parameter	Position	Path	Description	CWE
ContainerPath	path	/../../../../../../../../../etc	Attacker-controlled container path in image volumes leads to host file copy via containerd CRI, enabling access to arbitrary host files.	CWE-200
Volumes	path	/../../../../../../../../../etc	Attacker-controlled container path in image volumes leads to host file copy via containerd CRI, enabling access to arbitrary host files.	CWE-200

17 Jun 2026 04:30Current

7.8High risk

Vulners AI Score7.8

CVSS 25

CVSS 3.17.5

EPSS0.27392

CWE-200