WID-SEC-W-2022-1002

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Amazon Linux 2: Mehrere Schwachstellen

view advisory published 2021-12-08

Ein lokaler Angreifer kann mehrere Schwachstellen in Amazon Linux 2 ausnutzen, um Informationen offenzulegen, Dateien zu manipulieren oder falsche Informationen darzustellen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2021-41190USmedium5.0—
The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior,…
CVE-2021-32760USmedium6.3—
containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Un…
CVE-2021-21334USmedium6.3—
In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through Kubernetes, crictl, or…
CVE-2020-15157USmedium6.1—
In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the OCI Image format or D…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan