Summary
David Korczynski and Adam Korczynski discovered that containerd
incorrectly processed certain images with large files. An attacker
could possibly use this issue to cause containerd to crash,
resulting in a denial of service. (CVE-2023-25153)
It was discovered that containerd incorrectly set up supplementary
groups inside a container. An attacker with direct access to the
container could possibly use this issue to obtain sensitive information
or execute code with higher privileges. (CVE-2023-25173)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | containerd | 1.6.12-0ubuntu1~20.04.3 |
| Ubuntu · 22.04 LTS 22.04:LTS | containerd | 1.6.12-0ubuntu1~22.04.3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | containerd | 1.2.6-0ubuntu1~16.04.6+esm4 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | containerd | 1.6.12-0ubuntu1~18.04.1+esm1 |
Vulnerabilities 2
-
Medium 6.2
containerd OCI image importer memory exhaustion
containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could…
-
Medium 5.3
containerd supplementary groups are not set up properly
containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supp…