Database/Container, Kubernetes & orchestration

containerd: Crafted image can change Unix file permissions of existing host files during extraction

CVE-2021-32760Container, Kubernetes & orchestrationcurated

Impact

Crafted image can change Unix file permissions of existing host files during extraction

Who can reach it

Malicious image

What to do

Rolling containerd upgrade with node drain

References

https://nvd.nist.gov/vuln/detail/CVE-2021-32760

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.