Privilege Escalation

🗓️ 04 Dec 2020 16:29:12Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 30 Views

containerd privilege escalation vulnerabilit

Reporter	Title	Published	Views	Family All 115
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2020–15257)	18 Dec 202015:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to an issue in OPM and Golang Go packages (CVE-2020-15257, CVE-2021-21334 and CVE-2021-41771)	8 Jul 202207:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
ATTACKERKB	CVE-2020-15257	1 Dec 202000:00	–	attackerkb
Tenable Nessus	Amazon Linux 2 : containerd (ALASECS-2023-030)	16 Nov 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : containerd, containerd-stress (ALAS-2020-1455)	30 Nov 202000:00	–	nessus
Tenable Nessus	Debian DSA-4865-1 : docker.io - security update	1 Mar 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kata-containers (EulerOS-SA-2021-1245)	5 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kata-containers (EulerOS-SA-2021-1264)	5 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : docker-engine (EulerOS-SA-2022-1886)	17 Jun 202200:00	–	nessus

Vulners

Node

linuxfoundation containerdMatch1.3.4-r1os

AND

alpinelinux alpine_linuxMatch3.12

linuxfoundation containerdMatch1.3.2-r1os

AND

linuxfoundation containerdMatch1.3.2-r0os

AND

alpinelinux alpine_linuxMatch3.11

linuxfoundation containerdMatch1.4.1~ds1-2debian

AND

debian debian_linuxMatch11

linuxfoundation containerdMatch1.4.1~ds1-2debian

AND

debian debian_linuxMatch999

docker.io docker.ioMatch19.03.13+dfsg3-1debian

AND

debian debian_linuxMatch999

docker.io docker.ioMatch19.03.13+dfsg1-3debian

AND

debian debian_linuxMatch11

docker dockerMatch19.03.9-r0os

AND

alpinelinux alpine_linuxMatch3.12

docker.io docker.ioMatch18.09.1+dfsg1-7.1+deb10u2debian

AND

debian debian_linuxMatch10

docker dockerMatch19.03.6-r2os

AND

docker dockerMatch19.03.8-r1os

AND

docker dockerMatch19.03.8-r0os

AND

docker dockerMatch19.03.10-r0os

AND

docker dockerMatch19.03.7-r0os

AND

alpinelinux alpine_linuxMatchedge

k3s k3sMatch1.17.0.1-r0os

AND

k3s k3sMatch1.18.2.1-r1os

AND

k3s k3sMatch1.17.4.1-r0os

AND

k3s k3sMatch1.17.4.1-r1os

AND

k3s k3sMatch1.17.3.1-r0os

AND

k3s k3sMatch1.18.3.1-r0os

AND

k3s k3sMatch1.18.2.1-r0os

AND

alpinelinux alpine_linuxMatchedge

linuxfoundation containerdMatch1.3.4-r0os

AND

linuxfoundation containerdMatch1.3.4-r1os

AND

linuxfoundation containerdMatch1.3.3-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/v3.11/community.yaml
secdb	www.secdb.alpinelinux.org/v3.12/community.yaml
debian	www.debian.org/security/2021/dsa-4865
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNKXLOLZWO5FMAPX63ZL7JNKTNNT5NQD/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LNKXLOLZWO5FMAPX63ZL7JNKTNNT5NQD/
github	www.github.com/advisories/GHSA-36xw-fx78-c5r4
security	www.security.gentoo.org/glsa/202105-33
github	www.github.com/containerd/containerd/commit/4a4bb851f5da563ff6e68a83dc837c7699c469ad
github	www.github.com/containerd/containerd/releases/tag/v1.4.3
github	www.github.com/containerd/containerd/security/advisories/GHSA-36xw-fx78-c5r4

07 Nov 2023 23:15Current

3.5Low risk

Vulners AI Score3.5

CVSS 3.15.2

CVSS 23.6

EPSS0.13305