Strix
26.1K

CVE-2022-23648

HIGHCVSS 7.5/10EPSS 27.39%

Last modified

CVE-2022-23648 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. EPSS estimates a 27.39% chance of exploitation in the next 30 days.

Description

containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd’s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
27.39%

97.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
LinuxfoundationContainerd< 1.4.13
LinuxfoundationContainerd>= 1.5.0, < 1.5.10
LinuxfoundationContainerd>= 1.6.0, < 1.6.1
DebianDebian Linux11.0
FedoraprojectFedora34
FedoraprojectFedora35
FedoraprojectFedora36

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-23648?
containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd’s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.
How severe is CVE-2022-23648?
CVE-2022-23648 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 27.39% probability of exploitation in the next 30 days.
How do I fix CVE-2022-23648?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-23648?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST