GO-2025-4100
containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2024-25621
- Alias
- GHSA-pwhc-rpq9-4c8w
Description
containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/containerd/containerd | introduced 0, fixed 1.7.29 |
| Go · github.com/containerd/containerd/v2 | introduced 0, fixed 2.0.7, introduced 2.1.0-beta.0, fixed 2.1.5, introduced 2.2.0-beta.0, fixed 2.2.0 |
Références
- https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2024-25621 ADVISORY
- https://github.com/containerd/containerd/commit/7c59e8e9e970d38061a77b586b23655c352bfec5 FIX
- https://github.com/containerd/containerd/blob/main/docs/rootless.md WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |