Skip to content
OpenAdvisories
Medium USN-4653-2 1 CVE

containerd vulnerability

Published Jan 13, 2021 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

USN-4653-1 fixed a vulnerability in containerd. Unfortunately, those containerd packages introduced a regression in docker.io and the update was reverted. This update addresses the docker.io issue and reintroduces the fixes from USN-4653-1. We apologize for the inconvenience.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS containerd 1.2.6-0ubuntu1~16.04.6
Ubuntu · 18.04 LTS 18.04:LTS containerd 1.3.3-0ubuntu1~18.04.4
Ubuntu · 20.04 LTS 20.04:LTS containerd 1.3.3-0ubuntu2.2

Vulnerabilities 1

  • Medium 5.2
    CVE-2020-15257 Public exploit

    containerd-shim API Exposed to Host Network Containers

    containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s AP…

    containerd containerd ctop docker.io Debian Ubuntu Alpine Wolfi Go

References

  • report
    https://ubuntu.com/security/CVE-2020-15257
  • report
    https://launchpad.net/bugs/1870514