Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2021-21334

A flaw was found in containerd CRI plugin. Containers launched through containerd's CRI implementation that share the same image may receive incorrect environment variables, including values that are defined for other containers. The highest threat from this vulnerability is to data confidentiality. (CVE-2021-21334)

Source

ALAS2NITRO-ENCLAVES-2021-011

Amazon Linux 2 Security Advisory: ALASNITRO-ENCLAVES-2021-011
Advisory Release Date: 2021-10-19 20:47 Pacific
Advisory Updated Date: 2021-11-18 21:38 Pacific

Severity: Medium

References: CVE-2021-21334

Issue Overview:

A flaw was found in containerd CRI plugin. Containers launched through containerd's CRI implementation that share the same image may receive incorrect environment variables, including values that are defined for other containers. The highest threat from this vulnerability is to data confidentiality. (CVE-2021-21334)

Affected Packages:

containerd

Issue Correction:
Run yum update containerd to update your system.

New Packages:

aarch64:
    containerd-1.4.4-1.amzn2.aarch64
    containerd-stress-1.4.4-1.amzn2.aarch64
    containerd-debuginfo-1.4.4-1.amzn2.aarch64

src:
    containerd-1.4.4-1.amzn2.src

x86_64:
    containerd-1.4.4-1.amzn2.x86_64
    containerd-stress-1.4.4-1.amzn2.x86_64
    containerd-debuginfo-1.4.4-1.amzn2.x86_64

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ALAS2NITRO-ENCLAVES-2021-011

ALAS2NITRO-ENCLAVES-2021-011

Vulmon Search

About

Products

Connect