Time-of-check Time-of-use (TOCTOU) Race Condition

🗓️ 24 May 2025 05:43:14Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 4 Views

TOCTOU race condition vulnerability in containerd allows malicious image modifications to host files.

Reporter	Title	Published	Views	Family All 36
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	16 Jan 202616:43	–	ibm
AlpineLinux	CVE-2025-47290	20 May 202518:25	–	alpinelinux
Chainguard	CVE-2025-47290 vulnerabilities	23 May 202513:16	–	cgr
Circl	CVE-2025-47290	20 May 202518:40	–	circl
CNNVD	containerd 安全漏洞	20 May 202500:00	–	cnnvd
Tenable Nessus	Containerd 2.1.x < 2.1.1 TOCTOU	27 May 202500:00	–	nessus
Tenable Nessus	Fedora 43 : containerd (2025-bacdac27c8)	17 Jul 202500:00	–	nessus
CVE	CVE-2025-47290	20 May 202518:25	–	cve
Cvelist	CVE-2025-47290 Containerd vulnerable to host filesystem access during image unpack	20 May 202518:25	–	cvelist
Debian CVE	CVE-2025-47290	20 May 202518:25	–	debiancve

Vulners

Node

containerd containerdMatch1.6.4-r1go

AND

containerd containerdMatch1.7.0-r3go

AND

containerd containerdMatch1.7.0-r1go

AND

containerd containerdMatch1.6.4-r2go

AND

containerd containerdMatch1.7.7-r1go

AND

containerd containerdMatch1.5.7-r0go

AND

containerd containerdMatch1.6.4-r0go

AND

containerd containerdMatch1.5.4-r0go

AND

containerd containerdMatch1.6.16-r0go

AND

containerd containerdMatch1.7.2-r1go

AND

containerd containerdMatch1.6.12-r0go

AND

containerd containerdMatch2.0.0-r0go

AND

containerd containerdMatch1.5.5-r1go

AND

containerd containerdMatch2.0.4-r1go

AND

containerd containerdMatch1.6.19-r0go

AND

containerd containerdMatch1.7.2-r2go

AND

containerd containerdMatch1.5.9-r1go

AND

containerd containerdMatch1.3.4-r1go

AND

containerd containerdMatch1.6.6-r0go

AND

containerd containerdMatch1.7.22-r0go

AND

containerd containerdMatch1.7.1-r0go

AND

containerd containerdMatch1.6.16-r1go

AND

containerd containerdMatch1.5.8-r0go

AND

containerd containerdMatch2.0.5-r0go

AND

containerd containerdMatch1.6.8-r1go

AND

containerd containerdMatch1.7.14-r0go

AND

containerd containerdMatch1.6.10-r0go

AND

containerd containerdMatch1.6.15-r0go

AND

containerd containerdMatch1.7.18-r0go

AND

containerd containerdMatch1.4.3-r0go

AND

containerd containerdMatch1.7.9-r0go

AND

containerd containerdMatch1.7.19-r0go

AND

containerd containerdMatch1.4.4-r0go

AND

containerd containerdMatch1.7.13-r0go

AND

containerd containerdMatch1.7.10-r0go

AND

containerd containerdMatch2.0.3-r0go

AND

containerd containerdMatch1.6.3-r0go

AND

containerd containerdMatch1.7.19-r2go

AND

containerd containerdMatch1.6.9-r0go

AND

containerd containerdMatch1.6.6-r1go

AND

containerd containerdMatch2.1.0-r1go

AND

containerd containerdMatch1.7.23-r0go

AND

containerd containerdMatch2.0.1-r0go

AND

containerd containerdMatch2.0.2-r0go

AND

containerd containerdMatch1.5.1-r0go

AND

containerd containerdMatch1.6.8-r0go

AND

containerd containerdMatch1.7.14-r1go

AND

containerd containerdMatch1.6.1-r0go

AND

containerd containerdMatch1.5.9-r0go

AND

containerd containerdMatch1.7.6-r0go

AND

containerd containerdMatch1.6.0-r0go

AND

containerd containerdMatch1.7.17-r0go

AND

containerd containerdMatch1.7.3-r0go

AND

containerd containerdMatch1.7.5-r0go

AND

containerd containerdMatch1.6.1-r1go

AND

containerd containerdMatch1.7.18-r1go

AND

containerd containerdMatch1.5.5-r2go

AND

containerd containerdMatch1.7.15-r0go

AND

containerd containerdMatch1.7.19-r1go

AND

containerd containerdMatch1.6.10-r1go

AND

containerd containerdMatch1.7.21-r0go

AND

containerd containerdMatch1.6.2-r0go

AND

containerd containerdMatch2.0.4-r0go

AND

containerd containerdMatch1.6.8-r2go

AND

containerd containerdMatch1.7.20-r0go

AND

containerd containerdMatch1.3.4-r0go

AND

containerd containerdMatch1.5.1-r1go

AND

containerd containerdMatch1.7.5-r1go

AND

containerd containerdMatch1.6.18-r0go

AND

containerd containerdMatch1.7.2-r3go

AND

containerd containerdMatch1.6.9-r1go

AND

containerd containerdMatch1.3.3-r0go

AND

containerd containerdMatch2.0.2-r1go

AND

containerd containerdMatch1.6.14-r0go

AND

containerd containerdMatch1.5.5-r0go

AND

containerd containerdMatch1.7.7-r2go

AND

containerd containerdMatch1.7.8-r0go

AND

containerd containerdMatch1.7.16-r0go

AND

containerd containerdMatch1.5.0-r0go

AND

containerd containerdMatch1.7.13-r2go

AND

containerd containerdMatch1.7.0-r0go

AND

containerd containerdMatch1.7.0-r2go

AND

containerd containerdMatch1.6.6-r2go

AND

alpinelinux alpine_linuxMatchedge

containerd github.com/containerd/containerdMatch2.1.0-r1go

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
github	www.github.com/containerd/containerd/commit/cada13298fba85493badb6fecb6ccf80e49673cc
github	www.github.com/containerd/containerd/releases/tag/v2.1.1
github	www.github.com/containerd/containerd/security/advisories/GHSA-cm76-qm8v-3j95

26 May 2025 08:51Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.9

CVSS 49.4

EPSS0.00063

SSVC