Select your cookie preferences

We use cookies and similar tools to enhance your experience, provide our services, deliver relevant advertising, and make improvements. Approved third parties also use these tools to help us deliver advertising and provide certain site features.

CVE-2021-41103

Public on 2021-10-01
Modified on 2023-01-27
Description

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability. Users unable to update should limit access to the host to trusted users. Update directory permission on container bundles directories.

Severity
Medium
See what this means
CVSS v3 Base Score
5.9
See breakdown
Continue reading

Affected Packages

Platform Package Release Date Advisory
Amazon Linux 1 containerd 2021-10-01 17:58 ALAS-2021-1540
Amazon Linux 2 - Docker Extra containerd 2022-03-07 21:25 ALAS2DOCKER-2022-016
Amazon Linux 2 - Ecs Extra containerd 2023-11-09 20:27 ALAS2ECS-2023-027
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra containerd 2022-03-07 21:41 ALAS2NITRO-ENCLAVES-2022-016

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
NVD CVSSv3 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVSSv2 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C