containerd vulnerability

2021-03-1700:00:00

ubuntu.com

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.7%

JSON

Releases

Ubuntu 20.10
Ubuntu 20.04 LTS

Packages

containerd - daemon to control runC

Details

It was discovered that containerd incorrectly handled certain environment
variables. Contrary to expectations, a container could receive environment
variables defined for a different container, possibly containing sensitive
information.

OSVersionArchitecturePackageVersionFilename
Ubuntu20.10noarchcontainerd< 1.3.7-0ubuntu3.3UNKNOWN
Ubuntu20.10noarchcontainerd-dbgsym< 1.3.7-0ubuntu3.3UNKNOWN
Ubuntu20.10noarchgolang-github-containerd-containerd-dev< 1.3.7-0ubuntu3.3UNKNOWN
Ubuntu20.04noarchcontainerd< 1.3.3-0ubuntu2.3UNKNOWN
Ubuntu20.04noarchcontainerd-dbgsym< 1.3.3-0ubuntu2.3UNKNOWN
Ubuntu20.04noarchgolang-github-docker-containerd-dev< 1.3.3-0ubuntu2.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	20.10	noarch	containerd	< 1.3.7-0ubuntu3.3	UNKNOWN
Ubuntu	20.10	noarch	containerd-dbgsym	< 1.3.7-0ubuntu3.3	UNKNOWN
Ubuntu	20.10	noarch	golang-github-containerd-containerd-dev	< 1.3.7-0ubuntu3.3	UNKNOWN
Ubuntu	20.04	noarch	containerd	< 1.3.3-0ubuntu2.3	UNKNOWN
Ubuntu	20.04	noarch	containerd-dbgsym	< 1.3.3-0ubuntu2.3	UNKNOWN
Ubuntu	20.04	noarch	golang-github-docker-containerd-dev	< 1.3.3-0ubuntu2.3	UNKNOWN