USN-7374-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-7374-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7374-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-7374-1

Related

Published

2025-03-26T18:53:21.729627Z

Modified

2025-03-26T18:53:21.729627Z

Summary

containerd vulnerability

Details

Benjamin Koltermann discovered that containerd incorrectly handled large user id values. This could result in containers possibly being run as root, contrary to expectations.

References

Affected packages

Ubuntu:Pro:16.04:LTS / containerd

Package

Name: containerd
Purl: pkg:deb/ubuntu/containerd@1.2.6-0ubuntu1~16.04.6+esm5?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.6-0ubuntu1~16.04.6+esm5

Affected versions

0.*

0.2.1-0ubuntu4~16.04

0.2.3-0ubuntu1~16.04

0.2.5-0ubuntu1~16.04.1

1.*

1.2.6-0ubuntu1~16.04.2

1.2.6-0ubuntu1~16.04.3

1.2.6-0ubuntu1~16.04.4

1.2.6-0ubuntu1~16.04.5

1.2.6-0ubuntu1~16.04.6

1.2.6-0ubuntu1~16.04.6+esm1

1.2.6-0ubuntu1~16.04.6+esm2

1.2.6-0ubuntu1~16.04.6+esm4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "containerd",
            "binary_version": "1.2.6-0ubuntu1~16.04.6+esm5"
        },
        {
            "binary_name": "golang-github-docker-containerd-dev",
            "binary_version": "1.2.6-0ubuntu1~16.04.6+esm5"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}

Ubuntu:Pro:18.04:LTS / containerd

Package

Name: containerd
Purl: pkg:deb/ubuntu/containerd@1.6.12-0ubuntu1~18.04.1+esm2?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.12-0ubuntu1~18.04.1+esm2

Affected versions

0.*

0.2.5-0ubuntu2

1.*

1.2.6-0ubuntu1~18.04.1

1.2.6-0ubuntu1~18.04.2

1.3.3-0ubuntu1~18.04.1

1.3.3-0ubuntu1~18.04.2

1.3.3-0ubuntu1~18.04.3

1.3.3-0ubuntu1~18.04.4

1.4.4-0ubuntu1~18.04.2

1.5.2-0ubuntu1~18.04.1

1.5.2-0ubuntu1~18.04.2

1.5.2-0ubuntu1~18.04.3

1.5.5-0ubuntu3~18.04.1

1.5.5-0ubuntu3~18.04.2

1.5.9-0ubuntu1~18.04.1

1.5.9-0ubuntu1~18.04.2

1.6.12-0ubuntu1~18.04.1

1.6.12-0ubuntu1~18.04.1+esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "containerd",
            "binary_version": "1.6.12-0ubuntu1~18.04.1+esm2"
        },
        {
            "binary_name": "containerd-dbgsym",
            "binary_version": "1.6.12-0ubuntu1~18.04.1+esm2"
        },
        {
            "binary_name": "golang-github-containerd-containerd-dev",
            "binary_version": "1.6.12-0ubuntu1~18.04.1+esm2"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}

Ubuntu:20.04:LTS / containerd

Package

Name: containerd
Purl: pkg:deb/ubuntu/containerd@1.6.12-0ubuntu1~20.04.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.12-0ubuntu1~20.04.8

Affected versions

1.*

1.2.10-0ubuntu1

1.3.2-0ubuntu1

1.3.3-0ubuntu1

1.3.3-0ubuntu2

1.3.3-0ubuntu2.1

1.3.3-0ubuntu2.2

1.3.3-0ubuntu2.3

1.4.4-0ubuntu1~20.04.2

1.5.2-0ubuntu1~20.04.1

1.5.2-0ubuntu1~20.04.2

1.5.2-0ubuntu1~20.04.3

1.5.5-0ubuntu3~20.04.1

1.5.5-0ubuntu3~20.04.2

1.5.9-0ubuntu1~20.04.1

1.5.9-0ubuntu1~20.04.4

1.5.9-0ubuntu1~20.04.5

1.5.9-0ubuntu1~20.04.6

1.6.12-0ubuntu1~20.04.1

1.6.12-0ubuntu1~20.04.3

1.6.12-0ubuntu1~20.04.5

1.6.12-0ubuntu1~20.04.6

1.6.12-0ubuntu1~20.04.7

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "golang-github-containerd-containerd-dev",
            "binary_version": "1.6.12-0ubuntu1~20.04.8"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:20.04:LTS / containerd-app

Package

Name: containerd-app
Purl: pkg:deb/ubuntu/containerd-app@1.7.24-0ubuntu1~20.04.2?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.7.24-0ubuntu1~20.04.2

Affected versions

1.*

1.7.2-0ubuntu1~20.04.1

1.7.12-0ubuntu2~20.04.1

1.7.24-0ubuntu1~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "containerd",
            "binary_version": "1.7.24-0ubuntu1~20.04.2"
        },
        {
            "binary_name": "containerd-dbgsym",
            "binary_version": "1.7.24-0ubuntu1~20.04.2"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:22.04:LTS / containerd

Package

Name: containerd
Purl: pkg:deb/ubuntu/containerd@1.6.12-0ubuntu1~22.04.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.12-0ubuntu1~22.04.8

Affected versions

1.*

1.5.5-0ubuntu3

1.5.9-0ubuntu1

1.5.9-0ubuntu2

1.5.9-0ubuntu3

1.5.9-0ubuntu3.1

1.6.12-0ubuntu1~22.04.1

1.6.12-0ubuntu1~22.04.3

1.6.12-0ubuntu1~22.04.5

1.6.12-0ubuntu1~22.04.6

1.6.12-0ubuntu1~22.04.7

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "golang-github-containerd-containerd-dev",
            "binary_version": "1.6.12-0ubuntu1~22.04.8"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:22.04:LTS / containerd-app

Package

Name: containerd-app
Purl: pkg:deb/ubuntu/containerd-app@1.7.24-0ubuntu1~22.04.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.7.24-0ubuntu1~22.04.2

Affected versions

1.*

1.7.2-0ubuntu1~22.04.1

1.7.12-0ubuntu2~22.04.1

1.7.24-0ubuntu1~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "containerd",
            "binary_version": "1.7.24-0ubuntu1~22.04.2"
        },
        {
            "binary_name": "containerd-dbgsym",
            "binary_version": "1.7.24-0ubuntu1~22.04.2"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:24.10 / containerd-app

Package

Name: containerd-app
Purl: pkg:deb/ubuntu/containerd-app@2.0.0~rc3-0ubuntu1.1?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.0~rc3-0ubuntu1.1

Affected versions

1.*

1.7.12-0ubuntu4

1.7.19-0ubuntu1

2.*

2.0.0~rc3-0ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "containerd",
            "binary_version": "2.0.0~rc3-0ubuntu1.1"
        },
        {
            "binary_name": "containerd-dbgsym",
            "binary_version": "2.0.0~rc3-0ubuntu1.1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:24.04:LTS / containerd-app

Package

Name: containerd-app
Purl: pkg:deb/ubuntu/containerd-app@1.7.24-0ubuntu1~24.04.2?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.7.24-0ubuntu1~24.04.2

Affected versions

1.*

1.7.2-0ubuntu2

1.7.12-0ubuntu1

1.7.12-0ubuntu2

1.7.12-0ubuntu3

1.7.12-0ubuntu4

1.7.12-0ubuntu4.1

1.7.19-0ubuntu1~24.04.1

1.7.19+really1.7.12-0ubuntu4.2

1.7.24-0ubuntu1~24.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "containerd",
            "binary_version": "1.7.24-0ubuntu1~24.04.2"
        },
        {
            "binary_name": "containerd-dbgsym",
            "binary_version": "1.7.24-0ubuntu1~24.04.2"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:Pro:24.04:LTS / containerd

Package

Name: containerd
Purl: pkg:deb/ubuntu/containerd@1.6.24~ds1-1ubuntu1.2+esm1?arch=source&distro=esm-apps/noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.24~ds1-1ubuntu1.2+esm1

Affected versions

1.*

1.6.20~ds1-1ubuntu2

1.6.24~ds1-1ubuntu1

1.6.24~ds1-1ubuntu1.1

1.6.24~ds1-1ubuntu1.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "golang-github-containerd-containerd-dev",
            "binary_version": "1.6.24~ds1-1ubuntu1.2+esm1"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}