Lucene search

K
debianDebianDEBIAN:DSA-5162-1:83441
HistoryJun 12, 2022 - 5:51 p.m.

[SECURITY] [DSA 5162-1] containerd security update

2022-06-1217:51:32
lists.debian.org
74
debian
containerd
security update
denial of service
capabilities restriction

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

52.5%


Debian Security Advisory DSA-5162-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
June 12, 2022 https://www.debian.org/security/faq


Package : containerd
CVE ID : CVE-2022-24769 CVE-2022-31030

Two vulnerabilities were discovered that the containerd container
runtime, which could result in denial of service or incomplete restriction
of capabilities.

For the stable distribution (bullseye), these problems have been fixed in
version 1.4.13~ds1-1~deb11u2.

We recommend that you upgrade your containerd packages.

For the detailed security status of containerd please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/containerd

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

52.5%