FLAT-QB3BA – Vulnerability | Fluid Attacks Database

Database

Description

directory traversal

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	containerd	>=0 <1.4.5~ds1-2	1.4.5~ds1-2
debian 12	containerd	>=0 <1.4.5~ds1-2	1.4.5~ds1-2
debian 13	containerd	>=0 <1.4.5~ds1-2	1.4.5~ds1-2
debian 14	containerd	>=0 <1.4.5~ds1-2	1.4.5~ds1-2
go	github.com/containerd/containerd	>=0 <1.4.8 \|\| >=1.5.0 <1.5.4	1.4.8, 1.5.4
alpm rolling_release	containerd	>=1.5.2-1 <1.5.4-1	1.5.4-1

Aliases

1. CVE-2021-327602. NVD-2021-327603. OSV-DEBIAN-2021-327604. OSV-2021-327605. GHSA-c72p-9xmj-rx3w6. GCVE-2021-327607. SECURITY-TRACKER-CVE-2021-327608. security.gentoo.org

References

1. https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w2. https://github.com/containerd/containerd/commit/22e9a70c71eff6507be71955947a611f2ed91e6c3. https://github.com/containerd/containerd/commit/7ad08c69e09ee4930a48dbf2aab3cd612458617f4. https://github.com/containerd/containerd/releases/tag/v1.4.85. https://github.com/containerd/containerd/releases/tag/v1.5.46. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDMNDPJJTP3J5GOEDB66F6MGXUTRG3Y37. https://lists.fedoraproject.org/archives/list/[email protected]/message/DDMNDPJJTP3J5GOEDB66F6MGXUTRG3Y3

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.