{"api_version":"1","generated_at":"2026-04-23T03:25:13+00:00","cve":"CVE-2021-41103","urls":{"html":"https://cve.report/CVE-2021-41103","api":"https://cve.report/api/cve/CVE-2021-41103.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2021-41103","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-41103"},"summary":{"title":"CVE-2021-41103","description":"containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability. Users unable to update should limit access to the host to trusted users. Update directory permission on container bundles directories.","state":"PUBLIC","assigner":"security-advisories@github.com","published_at":"2021-10-04 17:15:00","updated_at":"2024-01-31 13:15:00"},"problem_types":["CWE-22"],"metrics":[],"references":[{"url":"https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq","name":"https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq","refsource":"CONFIRM","tags":[],"title":"Insufficiently restricted permissions on container root and plugin directories · Advisory · containerd/containerd · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/","name":"FEDORA-2021-df975338d4","refsource":"FEDORA","tags":[],"title":"[SECURITY] Fedora 34 Update: moby-engine-20.10.9-1.fc34 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/","name":"FEDORA-2021-df975338d4","refsource":"","tags":[],"title":"[SECURITY] Fedora 34 Update: moby-engine-20.10.9-1.fc34 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf","name":"https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf","refsource":"CONFIRM","tags":[],"title":"","mime":"application/pdf","httpstatus":"200","archivestatus":"404"},{"url":"https://www.debian.org/security/2021/dsa-5002","name":"DSA-5002","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-5002-1 containerd","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/","name":"FEDORA-2021-b5a9a481a2","refsource":"FEDORA","tags":[],"title":"[SECURITY] Fedora 35 Update: moby-engine-20.10.9-1.fc35 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/","name":"FEDORA-2021-b5a9a481a2","refsource":"","tags":[],"title":"[SECURITY] Fedora 35 Update: moby-engine-20.10.9-1.fc35 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://security.gentoo.org/glsa/202401-31","name":"GLSA-202401-31","refsource":"","tags":[],"title":"containerd: Multiple Vulnerabilities (GLSA 202401-31) — Gentoo security","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/containerd/containerd/commit/5b46e404f6b9f661a205e28d59c982d3634148f8","name":"https://github.com/containerd/containerd/commit/5b46e404f6b9f661a205e28d59c982d3634148f8","refsource":"MISC","tags":[],"title":"Merge pull request from GHSA-c2h3-6mxw-7mvq · containerd/containerd@5b46e40 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41103","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41103","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2021","cve_id":"41103","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"41103","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"34","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"41103","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"35","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"41103","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linuxfoundation","cpe5":"containerd","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"41103","vulnerable":"1","versionEndIncluding":"1.5.7","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linuxfoundation","cpe5":"containerd","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2021-41103","qid":"178878","title":"Debian Security Update for containerd (DSA 5002-1)"},{"cve":"CVE-2021-41103","qid":"183606","title":"Debian Security Update for containerd (CVE-2021-41103)"},{"cve":"CVE-2021-41103","qid":"198530","title":"Ubuntu Security Notification for containerd Vulnerability (USN-5100-1)"},{"cve":"CVE-2021-41103","qid":"281996","title":"Fedora Security Update for containerd (FEDORA-2021-df975338d4)"},{"cve":"CVE-2021-41103","qid":"352847","title":"Amazon Linux Security Advisory for containerd: ALAS-2021-1540"},{"cve":"CVE-2021-41103","qid":"353187","title":"Amazon Linux Security Advisory for containerd : ALAS2NITRO-ENCLAVES-2022-016"},{"cve":"CVE-2021-41103","qid":"353192","title":"Amazon Linux Security Advisory for containerd : ALAS2DOCKER-2022-016"},{"cve":"CVE-2021-41103","qid":"356886","title":"Amazon Linux Security Advisory for containerd : ALAS2ECS-2023-027"},{"cve":"CVE-2021-41103","qid":"501829","title":"Alpine Linux Security Update for containerd"},{"cve":"CVE-2021-41103","qid":"504643","title":"Alpine Linux Security Update for containerd"},{"cve":"CVE-2021-41103","qid":"590976","title":"Siemens SCALANCE LPE9403 Third-Party Multiple Vulnerabilities (ICSA-22-167-09) (SSA-222547)"},{"cve":"CVE-2021-41103","qid":"6140150","title":"AWS Bottlerocket Security Update for containerd (GHSA-56jr-hp73-5wv9)"},{"cve":"CVE-2021-41103","qid":"671313","title":"EulerOS Security Update for docker-engine (EulerOS-SA-2022-1239)"},{"cve":"CVE-2021-41103","qid":"671321","title":"EulerOS Security Update for docker-engine (EulerOS-SA-2022-1251)"},{"cve":"CVE-2021-41103","qid":"671845","title":"EulerOS Security Update for docker-engine (EulerOS-SA-2022-1886)"},{"cve":"CVE-2021-41103","qid":"671881","title":"EulerOS Security Update for docker-engine (EulerOS-SA-2022-1926)"},{"cve":"CVE-2021-41103","qid":"710846","title":"Gentoo Linux containerd Multiple Vulnerabilities (GLSA 202401-31)"},{"cve":"CVE-2021-41103","qid":"751272","title":"SUSE Enterprise Linux Security Update for containerd, docker, runc (SUSE-SU-2021:3506-1)"},{"cve":"CVE-2021-41103","qid":"751273","title":"OpenSUSE Security Update for containerd, docker, runc (openSUSE-SU-2021:3506-1)"},{"cve":"CVE-2021-41103","qid":"751303","title":"OpenSUSE Security Update for containerd, docker, runc (openSUSE-SU-2021:1404-1)"},{"cve":"CVE-2021-41103","qid":"751692","title":"OpenSUSE Security Update for containerd, docker (openSUSE-SU-2022:0334-1)"},{"cve":"CVE-2021-41103","qid":"753284","title":"SUSE Enterprise Linux Security Update for containerd, docker (SUSE-SU-2022:0334-1)"},{"cve":"CVE-2021-41103","qid":"900363","title":"Common Base Linux Mariner (CBL-Mariner) Security Update for moby-containerd (6154)"},{"cve":"CVE-2021-41103","qid":"901532","title":"Common Base Linux Mariner (CBL-Mariner) Security Update for moby-containerd (6681-1)"},{"cve":"CVE-2021-41103","qid":"980093","title":"Go (go) Security Update for github.com/containerd/containerd (GHSA-c2h3-6mxw-7mvq)"}]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"security-advisories@github.com","ID":"CVE-2021-41103","STATE":"PUBLIC","TITLE":"Insufficiently restricted permissions on plugin directories"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"containerd","version":{"version_data":[{"version_value":"< 1.4.11"},{"version_value":">= 1.5.0, < 1.5.7"}]}}]},"vendor_name":"containerd"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability. Users unable to update should limit access to the host to trusted users. Update directory permission on container bundles directories."}]},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}]},"references":{"reference_data":[{"name":"https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq","refsource":"CONFIRM","url":"https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq"},{"name":"https://github.com/containerd/containerd/commit/5b46e404f6b9f661a205e28d59c982d3634148f8","refsource":"MISC","url":"https://github.com/containerd/containerd/commit/5b46e404f6b9f661a205e28d59c982d3634148f8"},{"refsource":"FEDORA","name":"FEDORA-2021-df975338d4","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/"},{"refsource":"FEDORA","name":"FEDORA-2021-b5a9a481a2","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/"},{"refsource":"DEBIAN","name":"DSA-5002","url":"https://www.debian.org/security/2021/dsa-5002"},{"refsource":"CONFIRM","name":"https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf"}]},"source":{"advisory":"GHSA-c2h3-6mxw-7mvq","discovery":"UNKNOWN"}},"nvd":{"publishedDate":"2021-10-04 17:15:00","lastModifiedDate":"2024-01-31 13:15:00","problem_types":["CWE-22"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"severity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.0","versionEndExcluding":"1.5.7","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*","versionEndExcluding":"1.4.11","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2021","CveId":"41103","Ordinal":"216896","Title":"CVE-2021-41103","CVE":"CVE-2021-41103","Year":"2021"},"notes":[{"CveYear":"2021","CveId":"41103","Ordinal":"1","NoteData":"containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability. Users unable to update should limit access to the host to trusted users. Update directory permission on container bundles directories.","Type":"Description","Title":null},{"CveYear":"2021","CveId":"41103","Ordinal":"2","NoteData":"2021-10-04","Type":"Other","Title":"Published"},{"CveYear":"2021","CveId":"41103","Ordinal":"3","NoteData":"2021-11-06","Type":"Other","Title":"Modified"}]}}}