Skip to content
OpenAdvisories
Medium USN-5100-1 1 CVE

containerd vulnerability

Published Oct 4, 2021 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that containerd insufficiently restricted permissions on
container root and plugin directories. If a user or automated system were
tricked into launching a specially crafted container image, a remote
attacker could traverse directory contents and modify files and execute
programs on the host filesystem, possibly leading to privilege escalation.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS containerd 1.5.2-0ubuntu1~18.04.3
Ubuntu · 20.04 LTS 20.04:LTS containerd 1.5.2-0ubuntu1~20.04.3

Vulnerabilities 1

  • Medium 5.9
    CVE-2021-41103

    Insufficiently restricted permissions on plugin directories

    containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileg…

    containerd containerd ctop containerd Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • report
    https://ubuntu.com/security/CVE-2021-41103