SUSE update for containerd, docker
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 5 |
| CVE-ID | CVE-2021-41089 CVE-2021-41091 CVE-2021-41092 CVE-2021-41103 CVE-2021-41190 |
| CWE-ID | CWE-281 CWE-200 CWE-276 CWE-843 |
| Exploitation vector | Network |
| Public exploit | Public exploit code for vulnerability #2 is available. |
| Vulnerable software |
SUSE Linux Enterprise Micro Operating systems & Components / Operating system SUSE Linux Enterprise Server Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing Operating systems & Components / Operating system SUSE Linux Enterprise Module for Containers Operating systems & Components / Operating system SUSE Manager Server Operating systems & Components / Operating system SUSE Manager Proxy Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications Operating systems & Components / Operating system docker-fish-completion Operating systems & Components / Operating system package or component docker-bash-completion Operating systems & Components / Operating system package or component docker-debuginfo Operating systems & Components / Operating system package or component docker Operating systems & Components / Operating system package or component containerd Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 5 vulnerabilities.
1) Improper Preservation of Permissions
EUVDB-ID: #VU64415
Risk: Low
CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:U/U:Clear]
CVE-ID: CVE-2021-41089
CWE-ID:
CWE-281 - Improper preservation of permissions
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to application does not properly impose security restrictions, which leads to security restrictions bypass and privilege escalation.
MitigationUpdate the affected package containerd, docker to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Micro: 5.0 - 5.1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Module for Containers: 15-SP3
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
docker-fish-completion: before 20.10.12_ce-159.1
docker-bash-completion: before 20.10.12_ce-159.1
docker-debuginfo: before 20.10.12_ce-159.1
docker: before 20.10.12_ce-159.1
containerd: before 1.4.12-60.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_containers:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:a:suse:docker-fish-completion:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker-bash-completion:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:containerd:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2022/suse-su-20220334-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Improper Preservation of Permissions
EUVDB-ID: #VU64416
Risk: Low
CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/U:Clear]
CVE-ID: CVE-2021-41091
CWE-ID:
CWE-281 - Improper preservation of permissions
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to application does not properly impose security restrictions, which leads to security restrictions bypass and privilege escalation.
MitigationUpdate the affected package containerd, docker to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Micro: 5.0 - 5.1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Module for Containers: 15-SP3
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
docker-fish-completion: before 20.10.12_ce-159.1
docker-bash-completion: before 20.10.12_ce-159.1
docker-debuginfo: before 20.10.12_ce-159.1
docker: before 20.10.12_ce-159.1
containerd: before 1.4.12-60.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_containers:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:a:suse:docker-fish-completion:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker-bash-completion:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:containerd:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2022/suse-su-20220334-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
3) Information disclosure
EUVDB-ID: #VU64417
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2021-41092
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application. A remote attacker can gain unauthorized access to sensitive information on the system.
MitigationUpdate the affected package containerd, docker to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Micro: 5.0 - 5.1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Module for Containers: 15-SP3
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
docker-fish-completion: before 20.10.12_ce-159.1
docker-bash-completion: before 20.10.12_ce-159.1
docker-debuginfo: before 20.10.12_ce-159.1
docker: before 20.10.12_ce-159.1
containerd: before 1.4.12-60.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_containers:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:a:suse:docker-fish-completion:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker-bash-completion:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:containerd:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2022/suse-su-20220334-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Incorrect default permissions
EUVDB-ID: #VU57038
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-41103
CWE-ID:
CWE-276 - Incorrect Default Permissions
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to incorrect default permissions for container root directories and some plugins. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host can discover, read, and modify those files.
MitigationUpdate the affected package containerd, docker to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Micro: 5.0 - 5.1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Module for Containers: 15-SP3
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
docker-fish-completion: before 20.10.12_ce-159.1
docker-bash-completion: before 20.10.12_ce-159.1
docker-debuginfo: before 20.10.12_ce-159.1
docker: before 20.10.12_ce-159.1
containerd: before 1.4.12-60.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_containers:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:a:suse:docker-fish-completion:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker-bash-completion:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:containerd:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2022/suse-su-20220334-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Type Confusion
EUVDB-ID: #VU58229
Risk: Low
CVSSv4.0: 0.4 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-41190
CWE-ID:
CWE-843 - Type confusion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise the system.
The vulnerability exists due to a type confusion error. A remote authenticated attacker can pass specially crafted data to the application, trigger a type confusion error and interpret the resulting content differently.
MitigationUpdate the affected package containerd, docker to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Micro: 5.0 - 5.1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
SUSE Linux Enterprise Module for Containers: 15-SP3
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
docker-fish-completion: before 20.10.12_ce-159.1
docker-bash-completion: before 20.10.12_ce-159.1
docker-debuginfo: before 20.10.12_ce-159.1
docker: before 20.10.12_ce-159.1
containerd: before 1.4.12-60.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP3-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_module_for_containers:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:a:suse:docker-fish-completion:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker-bash-completion:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:docker:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:containerd:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2022/suse-su-20220334-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
