Showing 1 - 4 of 4

CVE-2021-32760

Status Candidate

Overview

containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access to the expected owner of the file, widen access to others, or set extended bits like setuid, setgid, and sticky. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in containerd 1.5.4 and 1.4.8. As a workaround, ensure that users only pull images from trusted sources. Linux security modules (LSMs) like SELinux and AppArmor can limit the files potentially affected by this bug through policies and profiles that prevent containerd from interacting with specific files.

Related Files

Gentoo Linux Security Advisory 202401-31: Posted Jan 31, 2024; Authored by Gentoo | Site security.gentoo.org; Gentoo Linux Security Advisory 202401-31 - Multiple vulnerabilities have been found in containerd, the worst of which could result in privilege escalation. Versions greater than or equal to 1.6.14 are affected.; tags | advisory, vulnerability; systems | linux, gentoo; advisories | CVE-2021-32760, CVE-2021-41103, CVE-2022-23471, CVE-2022-23648, CVE-2022-24769, CVE-2022-31030; SHA-256 | 340e890e584a72be161ce1a3ca689044b98f4c14c7bc18bb98943aa01d4f4ea1; Download | Favorite | View

Red Hat Security Advisory 2023-5952-01: Posted Oct 20, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-5952-01 - An update is now available for Red Hat OpenShift Service Mesh 2.4 for RHEL 8.; tags | advisory; systems | linux, redhat; advisories | CVE-2021-32760; SHA-256 | 595a887363ddbea80af269e47971e67fee5b17fec786e8b56e788e68da0a834a; Download | Favorite | View

Red Hat Security Advisory 2022-2183-01: Posted May 12, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-2183-01 - Release osp-director-operator images. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2018-25032, CVE-2019-11253, CVE-2019-19794, CVE-2020-15257, CVE-2021-29482, CVE-2021-32760, CVE-2022-1154, CVE-2022-1271; SHA-256 | cc75dc0ea9405e57725d05b12cad495f4f0943e8d0b5bc731db97d78ca8246b7; Download | Favorite | View

Ubuntu Security Notice USN-5012-1: Posted Jul 20, 2021; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 5012-1 - It was discovered that containerd incorrectly handled file permission changes. If a user or automated system were tricked into launching a specially crafted container image, a remote attacker could change permissions on files on the host filesystem and possibly escalate privileges.; tags | advisory, remote; systems | linux, ubuntu; advisories | CVE-2021-32760; SHA-256 | b22aac378066db3bff966a442b28fd637c43f1b71476469d8cea5cbdd5432b3c; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 248 files
Ubuntu 91 files
indoushka 58 files
Jasper Nota 25 files
Willem Westerhof 19 files
Gentoo 13 files
Debian 13 files
Jim Blankendaal 11 files
Martijn Baalman 9 files
Apple 9 files

File Archives

Systems

AIX (429)
Apple (2,099)
BSD (377)
CentOS (58)
Cisco (1,927)
Debian (7,087)
Fedora (1,693)
FreeBSD (1,246)
Gentoo (4,536)
HPUX (880)
iOS (378)
iPhone (108)
IRIX (220)
Juniper (69)
Linux (50,612)
Mac OS X (691)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,441)
Slackware (941)
Solaris (1,611)
SUSE (1,444)
Ubuntu (9,727)
UNIX (9,433)
UnixWare (187)
Windows (6,668)
Other

CVE-2021-32760

Overview

Related Files

File Archive:

August 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems