Permissions, Privileges, and Access Controls in containerd - CVE-2021-32760

Vulnerability identifier: #VU54999

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-32760

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to archive package allows chmod of file outside of unpack target directory. A remote attacker can deny access to the expected owner of the file, widen access to others, or set extended bits like setuid, setgid, and sticky.

containerd
trivy
DB2 Data Management Console
DB2 Data Management Console on CPD
DB2 on Cloud Pak for Data
Storage Ceph
Arch Linux
Amazon Linux AMI
Gentoo Linux
SUSE CaaS Platform
SUSE MicroOS
SUSE Enterprise Storage
SUSE Linux Enterprise Module for Containers
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
Ubuntu
Fedora
IBM Cloud Pak for Security
Red Hat OpenStack
QRadar Suite
OpenShift Service Mesh
IBM Edge Application Manager
runc
runc-debuginfo
containerd
containerd (Ubuntu package)
app-containers/containerd
Cloud Pak for Data
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity XT Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)
Dell EMC VxRail Appliance

Install updates from vendor's website.

containerd - addressed in versions 1.4.8, 1.5.4
trivy - update to 0.20.0
QRadar Suite - update to 1.10.19.0
OpenShift Service Mesh - update to 2.4.4
DB2 Data Management Console - update to 3.1.13.1
DB2 Data Management Console on CPD - update to 4.7.2
runc - addressed in versions 1.0.2-16.14.1, 1.0.2-23.1
runc-debuginfo - addressed in versions 1.0.2-16.14.1, 1.0.2-23.1
containerd - addressed in versions 1.4.4-16.42.1, 1.4.11-16.45.1, 1.4.11-56.1
containerd (Ubuntu package) - addressed in versions 1.5.2-0ubuntu1~18.04.2, 1.5.2-0ubuntu1~20.04.2, 1.5.2-0ubuntu1~20.10.2, 1.5.2-0ubuntu1~21.04.2
containerd - update to 1.5.5-1.fc34
app-containers/containerd - update to 1.6.14
DB2 on Cloud Pak for Data - update to 4.8.4
Cloud Pak for Data - update to 4.8.5
Dell EMC Unity VSA Operating Environment (OE) - update to 5.2.0.0.5.173
Dell EMC Unity XT Operating Environment (OE) - update to 5.2.0.0.5.173
Dell EMC Unity Operating Environment (OE) - update to 5.2.0.0.5.173
Dell EMC VxRail Appliance - update to 7.0.203
Storage Ceph - update to 7.1
Red Hat OpenStack - update to 16.2

• https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w
• https://github.com/containerd/containerd/releases/tag/v1.4.8
• https://github.com/containerd/containerd/releases/tag/v1.5.4

• Privilege escalation in Containerd
• Amazon Linux AMI update for containerd
• Arch Linux update for containerd
• Privilege escalation in Trivy
• SUSE update for containerd
• SUSE update for containerd, docker, runc
• SUSE update for containerd, docker, runc
• Ubuntu update for containerd
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in IBM Edge Application Manager
• Multiple vulnerabilities in Dell Unity, Dell UnityVSA, and Dell Unity XT
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh for 2.4
• Gentoo update for containerd
• Multiple vulnerabilities in IBM QRadar Suite Software
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data
• Multiple vulnerabilities in IBM Storage Ceph
• Multiple vulnerabilities in IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat OpenStack 16.2 packages
• Fedora 34 update for containerd
• Multiple vulnerabilities in IBM DB2 Data Management Console