USN-5776-1: containerd vulnerabilities

🗓️ 13 Dec 2022 08:35:00Reported by UbuntuType

ubuntu

ubuntu🔗 ubuntu.com👁 284 Views

containerd vulnerabilities in Ubuntu release

Reporter	Title	Published	Views	Family All 388
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities	20 Feb 202419:29	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	13 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in containerd may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2022-31030, CVE-2022-23471)	9 Jan 202415:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in containerd	17 May 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-31030)	24 Jun 202215:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from shadow-utils, procps-ng, containerd, urllib3, nghttp2 and Golang	15 Dec 202307:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5.1 addresses multiple security vulnerabilities	31 May 202322:20	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	18.04	amd64	containerd	1.5.9-0ubuntu1~18.04.2	containerd_1.5.9-0ubuntu1~18.04.2_amd64.deb
Ubuntu	18.04	arm64	containerd	1.5.9-0ubuntu1~18.04.2	containerd_1.5.9-0ubuntu1~18.04.2_arm64.deb
Ubuntu	18.04	armhf	containerd	1.5.9-0ubuntu1~18.04.2	containerd_1.5.9-0ubuntu1~18.04.2_armhf.deb
Ubuntu	18.04	i386	containerd	1.5.9-0ubuntu1~18.04.2	containerd_1.5.9-0ubuntu1~18.04.2_i386.deb
Ubuntu	18.04	ppc64el	containerd	1.5.9-0ubuntu1~18.04.2	containerd_1.5.9-0ubuntu1~18.04.2_ppc64el.deb
Ubuntu	18.04	s390x	containerd	1.5.9-0ubuntu1~18.04.2	containerd_1.5.9-0ubuntu1~18.04.2_s390x.deb
Ubuntu	20.04	any	containerd	1.5.9-0ubuntu1~20.04.6	containerd_1.5.9-0ubuntu1~20.04.6_any.deb
Ubuntu	22.04	any	containerd	1.5.9-0ubuntu3.1	containerd_1.5.9-0ubuntu3.1_any.deb
Ubuntu	22.10	any	containerd	1.6.4-0ubuntu1.1	containerd_1.6.4-0ubuntu1.1_any.deb
Ubuntu	18.04	amd64	containerd-dbgsym	1.5.9-0ubuntu1~18.04.2	containerd-dbgsym_1.5.9-0ubuntu1~18.04.2_amd64.deb

13 Dec 2022 08:35Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.5

CVSS 25

EPSS0.0114

SSVC

containerd vulnerabilities ubuntu 22.10 22.04 lts 20.04 lts 18.04 esm memory handling denial of service crash cve-2022-23471 cve-2022-31030 inheritable file capabilities privilege escalation encrypted container images imgcrypt library access control cve-2022-24769 cve-2022-24778