CVE-2022-23648

Description

containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerds CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerds CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

8.719

Associated Vulnerability

Vulnerability	OS Platform
daemon to control runC (USN-5311-1) containerd_1.5.9-0ubuntu1~21.10.3_amd64.deb	Linux
daemon to control runC (USN-5311-1) containerd_1.5.5-0ubuntu3~18.04.2_i386.deb	Linux
daemon to control runC (USN-5311-1) containerd_1.5.5-0ubuntu3~18.04.2_amd64.deb	Linux
daemon to control runC (USN-5311-1) containerd_1.5.9-0ubuntu1~20.04.4_amd64.deb	Linux
containerd security update(DSA-5091-1) containerd_1.4.13~ds1-1~deb11u1_amd64.deb	Linux
daemon to control runC (USN-5311-2) containerd_1.5.9-0ubuntu1~20.04.4_amd64.deb	Linux
daemon to control runC (USN-5311-2) containerd_1.5.9-0ubuntu1~21.10.3_amd64.deb	Linux
containerd Security Update (ALAS2023-2023-079) containerd-1.6.8-2.amzn2023.0.3.x86_64.rpm	Linux
containerd Security Update (ALAS2023-2023-079) containerd-stress-1.6.8-2.amzn2023.0.3.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234