Lucene search

UbuntuUSN-5311-1

HistoryMar 03, 2022 - 12:00 a.m.

containerd vulnerability

2022-03-0300:00:00

ubuntu.com

8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.9%

JSON

Releases

Ubuntu 21.10
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM

Packages

containerd - daemon to control runC

Details

It was discovered that containerd allows attackers to gain access to read-
only copies of arbitrary files and directories on the host via a specially-
crafted image configuration. An attacker could possibly use this issue to
obtain sensitive information.

OSVersionArchitecturePackageVersionFilename
Ubuntu21.10noarchcontainerd< 1.5.5-0ubuntu3.1UNKNOWN
Ubuntu21.10noarchcontainerd-dbgsym< 1.5.5-0ubuntu3.1UNKNOWN
Ubuntu21.10noarchgolang-github-containerd-containerd-dev< 1.5.5-0ubuntu3.1UNKNOWN
Ubuntu20.04noarchcontainerd< 1.5.5-0ubuntu3~20.04.2UNKNOWN
Ubuntu20.04noarchcontainerd-dbgsym< 1.5.5-0ubuntu3~20.04.2UNKNOWN
Ubuntu20.04noarchgolang-github-containerd-containerd-dev< 1.5.5-0ubuntu3~20.04.2UNKNOWN
Ubuntu18.04noarchcontainerd< 1.5.5-0ubuntu3~18.04.2UNKNOWN
Ubuntu18.04noarchcontainerd-dbgsym< 1.5.5-0ubuntu3~18.04.2UNKNOWN
Ubuntu18.04noarchgolang-github-containerd-containerd-dev< 1.5.5-0ubuntu3~18.04.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	21.10	noarch	containerd	< 1.5.5-0ubuntu3.1	UNKNOWN
Ubuntu	21.10	noarch	containerd-dbgsym	< 1.5.5-0ubuntu3.1	UNKNOWN
Ubuntu	21.10	noarch	golang-github-containerd-containerd-dev	< 1.5.5-0ubuntu3.1	UNKNOWN
Ubuntu	20.04	noarch	containerd	< 1.5.5-0ubuntu3~20.04.2	UNKNOWN
Ubuntu	20.04	noarch	containerd-dbgsym	< 1.5.5-0ubuntu3~20.04.2	UNKNOWN
Ubuntu	20.04	noarch	golang-github-containerd-containerd-dev	< 1.5.5-0ubuntu3~20.04.2	UNKNOWN
Ubuntu	18.04	noarch	containerd	< 1.5.5-0ubuntu3~18.04.2	UNKNOWN
Ubuntu	18.04	noarch	containerd-dbgsym	< 1.5.5-0ubuntu3~18.04.2	UNKNOWN
Ubuntu	18.04	noarch	golang-github-containerd-containerd-dev	< 1.5.5-0ubuntu3~18.04.2	UNKNOWN

References

ubuntu.com/security/CVE-2022-23648