Skip to content
OpenAdvisories
Medium USN-4653-1 1 CVE

containerd vulnerability

Published Nov 30, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that access controls for the shim’s API socket did not
restrict access to the abstract unix domain socket in some cases. An attacker
could use this vulnerability to run containers with elevated privileges.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS containerd 1.2.6-0ubuntu1~16.04.5
Ubuntu · 18.04 LTS 18.04:LTS containerd 1.3.3-0ubuntu1~18.04.3
Ubuntu · 20.04 LTS 20.04:LTS containerd 1.3.3-0ubuntu2.1

Vulnerabilities 1

  • Medium 5.2
    CVE-2020-15257 Public exploit

    containerd-shim API Exposed to Host Network Containers

    containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s AP…

    containerd containerd ctop docker.io Debian Ubuntu Alpine Wolfi Go

References

  • report
    https://ubuntu.com/security/CVE-2020-15257