Поиск уязвимостей
Количество 13
Количество 13
GHSA-pwhc-rpq9-4c8w
containerd affected by a local privilege escalation via wide permissions on CRI directory
CVE-2024-25621
containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system administrator permissions so the host can manually chmod the directories to not have group or world accessible permissions, or to run containerd in rootless mode.
CVE-2024-25621
containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system administrator permissions so the host can manually chmod the directories to not have group or world accessible permissions, or to run containerd in rootless mode.
CVE-2024-25621
containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system administrator permissions so the host can manually chmod the directories to not have group or world accessible permissions, or to run containerd in rootless mode.
CVE-2024-25621
containerd affected by a local privilege escalation via wide permissions on CRI directory
CVE-2024-25621
containerd is an open-source container runtime. Versions 0.1.0 through ...
ROS-20260209-80-0038
Уязвимость containerd
BDU:2026-02731
Уязвимость среды выполнения контейнеров Containerd, связанная с неправильным разрешением на исполнение, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
SUSE-SU-2025:4288-1
Security update for containerd
SUSE-SU-2025:4072-1
Security update for containerd
ROS-20260209-73-0032
Уязвимость containerd
ALT-PU-2026-2987
ALT-PU-2026-2987: package `containerd` update to version 2.2.1-alt1
openSUSE-SU-2026:21213-1
Security update for containerd
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-pwhc-rpq9-4c8w containerd affected by a local privilege escalation via wide permissions on CRI directory | CVSS3: 7.3 | 0% Низкий | около 1 года назад |
 | CVE-2024-25621 containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system administrator permissions so the host can manually chmod the directories to not have group or world accessible permissions, or to run containerd in rootless mode. | CVSS3: 7.8 | 0% Низкий | около 1 года назад |
 | CVE-2024-25621 containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system administrator permissions so the host can manually chmod the directories to not have group or world accessible permissions, or to run containerd in rootless mode. | CVSS3: 7.7 | 0% Низкий | около 1 года назад |
 | CVE-2024-25621 containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system administrator permissions so the host can manually chmod the directories to not have group or world accessible permissions, or to run containerd in rootless mode. | CVSS3: 7.8 | 0% Низкий | около 1 года назад |
 | CVE-2024-25621 containerd affected by a local privilege escalation via wide permissions on CRI directory | CVSS3: 7.3 | 0% Низкий | около 1 года назад |
| CVE-2024-25621 containerd is an open-source container runtime. Versions 0.1.0 through ... | CVSS3: 7.8 | 0% Низкий | около 1 года назад |
 | ROS-20260209-80-0038 Уязвимость containerd | CVSS3: 7.8 | 0% Низкий | 9 месяцев назад |
 | BDU:2026-02731 Уязвимость среды выполнения контейнеров Containerd, связанная с неправильным разрешением на исполнение, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.3 | 0% Низкий | около 1 года назад |
 | SUSE-SU-2025:4288-1 Security update for containerd | 12 месяцев назад | ||
| SUSE-SU-2025:4072-1 Security update for containerd | 12 месяцев назад | ||
| ROS-20260209-73-0032 Уязвимость containerd | CVSS3: 7.8 | 0% Низкий | 9 месяцев назад |
| ALT-PU-2026-2987 ALT-PU-2026-2987: package `containerd` update to version 2.2.1-alt1 | CVSS3: 7.8 | 9 месяцев назад | |
| openSUSE-SU-2026:21213-1 Security update for containerd | 4 месяца назад |
Уязвимостей на страницу