UBUNTU-CVE-2020-15157

In containerd an industry-standard container runtime before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific image layer otherwise known as a “foreign...

PT-2020-5851 · Containerd +5 · Kubernetes Containerd +4

Name of the Vulnerable Software and Affected Versions: containerd versions 1.2.0 through 1.2.13 Description: The issue is related to the incorrect handling of the image manifest in the containerd runtime environment. If a container image manifest includes a URL for a specific image layer, the...