CVE-2021-41103

CVE-2021-41103 affects containerd and stems from insufficiently restricted permissions on container root directories and some plugins, enabling unprivileged host users to traverse directories, read/modify files, and potentially execute programs (including those with extended permission bits). The...

PT-2021-6093

Name of the Vulnerable Software and Affected Versions containerd versions prior to 1.4.11 containerd versions prior to 1.5.7 Description A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux...

CVE-2021-41103

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory...

CVE-2021-41103

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory...

Ubuntu 18.04 LTS / 20.04 LTS : containerd vulnerability (USN-5100-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5100-1 advisory. It was discovered that containerd insufficiently restricted permissions on container root and plugin directories. If a user or automated system were...

UBUNTU-CVE-2021-41103

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory...

Amazon Linux AMI : containerd (ALAS-2021-1540)

The version of containerd installed on the remote host is prior to 1.4.6-3.9. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1540 advisory. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions,...

containerd:fuzz_fetcher: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5452496280616960 Project: containerd Fuzzing Engine: libFuzzer Fuzz Target: fuzzfetcher Job Type: libfuzzerasancontainerd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618000000080 Crash State: pthreadcreate cgotrypthreadcreate...

containerd:fuzz_fetcher: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5048741455855616 Project: containerd Fuzzing Engine: libFuzzer Fuzz Target: fuzzfetcher Job Type: libfuzzerasancontainerd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61a000000200 Crash State: pthreadcreate cgotrypthreadcreate...

Fedora: Security Advisory for containerd (FEDORA-2021-53ce601cb0)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: containerd-1.5.5-1.fc34

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

The vulnerability in the implementation of the `chmod` command in the container runtime system, Containerd, allows a malicious actor to increase their privileges.

The vulnerability of the chmod command implementation in the container runtime system, Containerd, is related to deficiencies in the isolation of the controlled system area. Exploiting this vulnerability allows a remote attacker to increase their privileges...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2021-32760)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability found in containerd that could result in file permission changes for existing files in the host's filesystem CVE-2021-32760 Vulnerability Details CVEID: CVE-2021-32760 Description: Containerd could allow a remote attacke...

[ASA-202107-70] containerd: directory traversal

Arch Linux Security Advisory ASA-202107-70 ========================================== Severity: Medium Date : 2021-07-27 CVE-ID : CVE-2021-32760 Package : containerd Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-2174 Summary ======= The package containerd before...

GHSA-C72P-9XMJ-RX3W Archive package allows chmod of file outside of unpack target directory

Impact A bug was found in containerd where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access to the expected owner of the file, widen access to others, or s...

Archive package allows chmod of file outside of unpack target directory

Impact A bug was found in containerd where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access to the expected owner of the file, widen access to others, or s...

containerd:fuzz_fetcher: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5230580076773376 Project: containerd Fuzzing Engine: libFuzzer Fuzz Target: fuzzfetcher Job Type: libfuzzerasancontainerd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00001be62e9c Crash State: NULL Sanitizer: address ASAN...

openSUSE 15 Security Update : containerd (openSUSE-SU-2021:1081-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1081-1 advisory. - containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafte...

openSUSE: Security Advisory for containerd (openSUSE-SU-2021:1081-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1081-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2021-32760: Fixed a bug which allows untrusted container images to change permissions in the host's filesystem. bsc1188282 This update was imported from the SUSE:SLE-15:Update update project...