docker.io - security update

Fixed packages 1

Vulnerabilities 4

• Medium 6.8
  CVE-2021-21284

  privilege escalation in Moby

  In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root. When using "--userns-remap", if the root user in the remapped namespace has acce…

  moby moby docker-machine-driver-harvester rancher-machine Debian Ubuntu Alpine Wolfi Go
  Feb 2, 2021
• Medium 6.5
  CVE-2021-21285

  Docker daemon crash during image pull of malicious image

  In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.

  moby moby docker-machine-driver-harvester rancher-machine Debian Ubuntu Alpine Wolfi Go
  Feb 2, 2021
• Medium 6.1
  CVE-2020-15157

  containerd can be coerced into leaking credentials during image pull

  In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific im…

  containerd containerd docker.io docker.io Debian Ubuntu Go
  Oct 16, 2020
• Medium 5.2
  CVE-2020-15257 Public exploit

  containerd-shim API Exposed to Host Network Containers

  containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s AP…

  containerd containerd ctop docker.io Debian Ubuntu Alpine Wolfi Go
  Dec 1, 2020