CVE-2021-32760

 

Published at: - 19-07-2021 11:15

Last modified: - 25-10-2022 05:47

Total changes: - 8

Description

containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access to the expected owner of the file, widen access to others, or set extended bits like setuid, setgid, and sticky. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in containerd 1.5.4 and 1.4.8. As a workaround, ensure that users only pull images from trusted sources. Linux security modules (LSMs) like SELinux and AppArmor can limit the files potentially affected by this bug through policies and profiles that prevent containerd from interacting with specific files.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

 

Verification logic

 

Reference

• https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w
• https://github.com/containerd/containerd/releases/tag/v1.4.8
• https://github.com/containerd/containerd/releases/tag/v1.5.4
• FEDORA-2021-53ce601cb0-Mailing List, Third Party Advisory

 

Keywords

NVD

 

CVE-2021-32760

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures