An update of the containerd package has been released.

The version of containerd installed on the remote host is prior to 1.4.6-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2022-016 advisory.

    containerd is an open source container runtime with an emphasis on simplicity, robustness and portability.
    A bug was found in containerd where container root directories and some plugins had insufficiently     restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and     execute programs. When containers included executable programs with extended permission bits (such as     setuid), unprivileged Linux users could discover and execute those programs. When the UID of an     unprivileged Linux user on the host collided with the file owner or group inside a container, the     unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has     been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are     released and may restart containers or update directory permissions to mitigate the vulnerability. Users     unable to update should limit access to the host to trusted users. Update directory permission on     container bundles directories. (CVE-2021-41103)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the telegraf package has been released.

A vulnerability was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
153980	Photon OS 2.0: Containerd PHSA-2021-2.0-0402	Nessus	PhotonOS Local Security Checks	2021/10/11	2024/7/23	high
160406	Amazon Linux 2 : containerd (ALASDOCKER-2022-016)	Nessus	Amazon Linux Local Security Checks	2022/5/2	2024/12/11	high
153974	Photon OS 4.0: Containerd PHSA-2021-4.0-0113	Nessus	PhotonOS Local Security Checks	2021/10/10	2025/8/22	high
153945	Photon OS 3.0: Containerd PHSA-2021-3.0-0311	Nessus	PhotonOS Local Security Checks	2021/10/8	2025/8/24	high
204388	Photon OS 5.0: Telegraf PHSA-2023-5.0-0041	Nessus	PhotonOS Local Security Checks	2024/7/24	2025/8/21	high
501882	Siemens SCALANCE LPE9403 Path Traversal (CVE-2021-41103)	Tenable OT Security	Tenable.ot	2024/1/15	2024/9/4	high

检测

插件搜索

high

high

high

high

high

high