Skip to content
OpenAdvisories
Medium USN-5012-1 1 CVE

containerd vulnerabilities

Published Jul 20, 2021 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that containerd incorrectly handled file permission
changes. If a user or automated system were tricked into launching a
specially crafted container image, a remote attacker could change
permissions on files on the host filesystem and possibly escalate
privileges.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS containerd 1.5.2-0ubuntu1~18.04.2
Ubuntu · 20.04 LTS 20.04:LTS containerd 1.5.2-0ubuntu1~20.04.2

Vulnerabilities 1

  • Medium 5.0
    CVE-2021-32760

    Archive package allows chmod of file outside of unpack target directory

    containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes…

    containerd containerd ctop containerd Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • report
    https://ubuntu.com/security/CVE-2021-32760