Skip to content
OpenAdvisories
Medium USN-4881-1 1 CVE

containerd vulnerability

Published Mar 17, 2021 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that containerd incorrectly handled certain environment
variables. Contrary to expectations, a container could receive environment
variables defined for a different container, possibly containing sensitive
information.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS containerd 1.3.3-0ubuntu2.3

Vulnerabilities 1

  • Medium 6.3
    CVE-2021-21334

    environment variable leak

    In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service) that shar…

    containerd containerd cri-o ctop Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • report
    https://ubuntu.com/security/CVE-2021-21334