Denial Of Service

🗓️ 21 Jul 2021 06:22:14Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 4 Views

Containerd vulnerable to denial of service from malicious container images altering file permissions.

Reporter	Title	Published	Views	Family All 132
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2021-32760)	6 Aug 202110:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse® on Cloud Pak for Data	19 Apr 202420:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	26 Mar 202503:52	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	1 Mar 202419:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities	31 May 202305:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
GithubExploit	Exploit for Exposure of Resource to Wrong Sphere in Linuxfoundation Containerd	29 Mar 202619:15	–	githubexploit
GithubExploit	Exploit for Exposure of Resource to Wrong Sphere in Linuxfoundation Containerd	29 Mar 202619:03	–	githubexploit

Vulners

Node

linuxfoundation containerdMatch1.5.1-r1os

AND

linuxfoundation containerdMatch1.5.1-r0os

AND

alpinelinux alpine_linuxMatch3.14

linuxfoundation containerdMatch1.3.4-r0os

AND

linuxfoundation containerdMatch1.5.0-r0os

AND

linuxfoundation containerdMatch1.4.4-r0os

AND

linuxfoundation containerdMatch1.4.3-r0os

AND

linuxfoundation containerdMatch1.5.1-r1os

AND

linuxfoundation containerdMatch1.5.1-r0os

AND

linuxfoundation containerdMatch1.3.3-r0os

AND

linuxfoundation containerdMatch1.3.4-r1os

AND

alpinelinux alpine_linuxMatchedge

linuxfoundation containerdMatch1.4.4-r0os

AND

alpinelinux alpine_linuxMatch3.13

linuxfoundation containerdMatch1.4.1~ds1-2debian

AND

debian debian_linuxMatch11

hirsute hirsuteMatch1.3.7-0ubuntu3debian

AND

hirsute hirsuteMatch1.4.3-0ubuntu1debian

AND

debian debian_linux

devel develMatch1.4.3-0ubuntu1debian

AND

devel develMatch1.3.6-0ubuntu1debian

AND

devel develMatch1.3.7-0ubuntu3debian

AND

debian debian_linux

apache groovyMatch1.3.7-0ubuntu3debian

AND

apache groovyMatch1.3.6-0ubuntu1debian

AND

debian debian_linux

focal focalMatch1.3.3-0ubuntu2debian

AND

debian debian_linux

google bionicMatch1.2.6-0ubuntu1~18.04.2debian

AND

google bionicMatch1.3.3-0ubuntu1~18.04.2debian

AND

google bionicMatch0.2.5-0ubuntu2debian

AND

debian debian_linux

Source	Link
secdb	www.secdb.alpinelinux.org/v3.13/community.yaml
secdb	www.secdb.alpinelinux.org/v3.14/community.yaml
secdb	www.secdb.alpinelinux.org/edge/community.yaml
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDMNDPJJTP3J5GOEDB66F6MGXUTRG3Y3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/DDMNDPJJTP3J5GOEDB66F6MGXUTRG3Y3/
security	www.security.gentoo.org/glsa/202401-31
github	www.github.com/containerd/containerd/releases/tag/v1.4.8
github	www.github.com/containerd/containerd/releases/tag/v1.5.4
github	www.github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w

31 Jan 2024 15:21Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15 - 6.3

CVSS 26.8

EPSS0.01608

SSVC