UpHeron
All vulnerabilities

Servers and applications

CVE-2020-15257

containerd-shim API exposed to host network containers

Severity
Medium 5.2
Published
30 Nov 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.3.9, 1.4.3
Also known as
GHSA-36xw-fx78-c5r4
Sources
NVD, Project advisories (GitHub)

Description

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting process had an effective UID of 0, but did not otherwise restrict access to the abstract Unix domain…

Affected software

SoftwareAffected versions
containerdServers and applications · cpe:a:linuxfoundation:containerd
  • Every version before 1.3.9
  • From 1.4.0 before 1.4.3
containerdServers and applications · github:containerd/containerd
  • Version 1.4.0
  • Version 1.4.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-15257
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-15257
  • GitHub Advisory Database https://github.com/advisories/GHSA-36xw-fx78-c5r4
  • github.com https://github.com/containerd/containerd/security/advisories/GHSA-36xw-fx78-c5r4