CVE catalog

CVE-2020-15257

containerd: CVE-2020-15257

Severity: High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Nov 30, 2020, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 3.13% · Oct 25, 2026

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting process had an effective UID of 0, but did not otherwise restrict access to the abstract Unix domain socket. This would allow malicious containers running in the same network namespace as the shim, with an effective UID of 0 but otherwise reduced privileges, to cause new processes to be run with elevated privileges. This vulnerability has been fixed in containerd 1.3.9 and 1.4.3. Users should update to these versions as soon as they are released. It should be noted that containers started with an old version of containerd-shim should be stopped and restarted, as running containers will continue to be vulnerable even after an upgrade. If you are not providing the ability for untrusted users to start containers in the same network namespace as the shim (typically the "host" network namespace, for example with docker run --net=host or hostNetwork: true in a Kubernetes pod) and run with an effective UID of 0, you are not vulnerable to this issue. If you are running containers with a vulnerable configuration, you can deny access to all abstract sockets with AppArmor by adding a line similar to deny unix addr=@**, to your policy. It is best practice to run containers with a reduced set of privileges, with a non-zero UID, and with isolated namespaces. The containerd maintainers strongly advise against sharing namespaces with the host. Reducing the set of isolation mechanisms used for a container necessarily increases that container's privilege, regardless of what container runtime is used for running that container.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	docker.io	sid	`28.5.2+dfsg4-5`	fixed
Debian	docker.io	forky	`28.5.2+dfsg4-5`	fixed
Debian	docker.io	trixie	`26.1.5+dfsg1-9+deb13u1`	fixed
Debian	docker.io	trixie-security	`26.1.5+dfsg1-9+deb13u1`	fixed
Debian	docker.io	bookworm	`20.10.24+dfsg1-1+deb12u1`	fixed
Debian	containerd	sid	`2.1.9+ds1-5`	fixed
Debian	containerd	forky	`2.1.9+ds1-5`	fixed
Debian	containerd	trixie	`1.7.24~ds1-6+deb13u1`	fixed
Debian	containerd	trixie-security	`1.7.24~ds1-6+deb13u1`	fixed
Debian	containerd	bookworm	`1.6.20~ds1-1+deb12u3`	fixed
Debian	containerd	bookworm-security	`1.6.20~ds1-1+deb12u2`	fixed
Ubuntu	containerd	16.04	`0.2.1-0ubuntu4~16.04`	vulnerable
Ubuntu	containerd	16.04	`0.2.3-0ubuntu1~16.04`	vulnerable
Ubuntu	containerd	16.04	`0.2.5-0ubuntu1~16.04.1`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.2`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.3`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.4`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.5`	fixed
Ubuntu	containerd	18.04	`0.2.5-0ubuntu2`	vulnerable
Ubuntu	containerd	18.04	`1.2.6-0ubuntu1~18.04.1`	vulnerable
Ubuntu	containerd	18.04	`1.2.6-0ubuntu1~18.04.2`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.1`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.2`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.3`	fixed
Ubuntu	containerd	20.04	`1.2.10-0ubuntu1`	vulnerable
Ubuntu	containerd	20.04	`1.3.2-0ubuntu1`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu1`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu2`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu2.1`	fixed
Ubuntu	containerd	16.04	`0.2.1-0ubuntu4~16.04`	vulnerable
Ubuntu	containerd	16.04	`0.2.3-0ubuntu1~16.04`	vulnerable
Ubuntu	containerd	16.04	`0.2.5-0ubuntu1~16.04.1`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.2`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.3`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.4`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.5`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.6`	fixed
Ubuntu	containerd	18.04	`0.2.5-0ubuntu2`	vulnerable
Ubuntu	containerd	18.04	`1.2.6-0ubuntu1~18.04.1`	vulnerable
Ubuntu	containerd	18.04	`1.2.6-0ubuntu1~18.04.2`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.1`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.2`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.3`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.4`	fixed
Ubuntu	containerd	20.04	`1.2.10-0ubuntu1`	vulnerable
Ubuntu	containerd	20.04	`1.3.2-0ubuntu1`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu1`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu2`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu2.1`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu2.2`	fixed
Suse	containerd	linux enterprise module for containers 15 sp2	`1.3.9-5.29.3`	fixed
Suse	docker	linux enterprise module for containers 15 sp2	`19.03.15_ce-6.43.3`	fixed
Suse	docker-runc	linux enterprise module for containers 15 sp2	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	fixed
Suse	golang-github-docker-libnetwork	linux enterprise module for containers 15 sp2	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	fixed
Suse	containerd	linux enterprise high performance computing 15 sp1-espos	`1.3.9-5.29.3`	fixed
Suse	docker	linux enterprise high performance computing 15 sp1-espos	`19.03.15_ce-6.43.3`	fixed
Suse	docker-runc	linux enterprise high performance computing 15 sp1-espos	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	fixed
Suse	golang-github-docker-libnetwork	linux enterprise high performance computing 15 sp1-espos	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	fixed
Suse	containerd	linux enterprise high performance computing 15 sp1-ltss	`1.3.9-5.29.3`	fixed
Suse	docker	linux enterprise high performance computing 15 sp1-ltss	`19.03.15_ce-6.43.3`	fixed
Suse	docker-runc	linux enterprise high performance computing 15 sp1-ltss	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	fixed
Suse	golang-github-docker-libnetwork	linux enterprise high performance computing 15 sp1-ltss	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	fixed
Suse	containerd	linux enterprise server 15 sp1-bcl	`1.3.9-5.29.3`	fixed
Suse	docker	linux enterprise server 15 sp1-bcl	`19.03.15_ce-6.43.3`	fixed
Suse	docker-runc	linux enterprise server 15 sp1-bcl	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	fixed
Suse	golang-github-docker-libnetwork	linux enterprise server 15 sp1-bcl	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	fixed
Suse	containerd	linux enterprise server 15 sp1-ltss	`1.3.9-5.29.3`	fixed
Suse	docker	linux enterprise server 15 sp1-ltss	`19.03.15_ce-6.43.3`	fixed
Suse	docker-runc	linux enterprise server 15 sp1-ltss	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	fixed
Suse	golang-github-docker-libnetwork	linux enterprise server 15 sp1-ltss	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	fixed
Suse	containerd	linux enterprise server for sap applications 15 sp1	`1.3.9-5.29.3`	fixed
Suse	docker	linux enterprise server for sap applications 15 sp1	`19.03.15_ce-6.43.3`	fixed
Suse	docker-runc	linux enterprise server for sap applications 15 sp1	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	fixed
Suse	golang-github-docker-libnetwork	linux enterprise server for sap applications 15 sp1	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	fixed
Suse	containerd	manager proxy 4.0	`1.3.9-5.29.3`	fixed
Suse	docker	manager proxy 4.0	`19.03.15_ce-6.43.3`	fixed
Suse	docker-runc	manager proxy 4.0	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	fixed
Suse	golang-github-docker-libnetwork	manager proxy 4.0	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	fixed
Suse	containerd	manager retail branch server 4.0	`1.3.9-5.29.3`	fixed
Suse	docker	manager retail branch server 4.0	`19.03.15_ce-6.43.3`	fixed
Suse	docker-runc	manager retail branch server 4.0	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	fixed
Suse	golang-github-docker-libnetwork	manager retail branch server 4.0	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	fixed
Suse	containerd	manager server 4.0	`1.3.9-5.29.3`	fixed
Suse	docker	manager server 4.0	`19.03.15_ce-6.43.3`	fixed
Suse	docker-runc	manager server 4.0	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	fixed
Suse	golang-github-docker-libnetwork	manager server 4.0	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	fixed
Suse	containerd	enterprise storage 6	`1.3.9-5.29.3`	fixed
Suse	docker	enterprise storage 6	`19.03.15_ce-6.43.3`	fixed
Suse	docker-runc	enterprise storage 6	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	fixed
Suse	golang-github-docker-libnetwork	enterprise storage 6	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	fixed
Suse	containerd	linux enterprise module for containers 12	`1.3.9-16.32.1`	fixed
Suse	docker	linux enterprise module for containers 12	`19.03.14_ce-98.57.1`	fixed
Suse	docker-runc	linux enterprise module for containers 12	`1.0.0rc10+gitr3981_dc9208a3303f-1.49.1`	fixed
Suse	golang-github-docker-libnetwork	linux enterprise module for containers 12	`0.7.0.1+gitr2908_55e924b8a842-34.1`	fixed
Opensuse	containerd	leap 15.2	`1.3.9-lp152.2.3.1`	fixed
Opensuse	docker	leap 15.2	`19.03.15_ce-lp152.2.3.1`	fixed
Opensuse	docker-runc	leap 15.2	`1.0.0rc10+gitr3981_dc9208a3303f-lp152.2.3.1`	fixed
Opensuse	fish	leap 15.2	`2.7.1-lp152.5.3.1`	fixed
Opensuse	golang-github-docker-libnetwork	leap 15.2	`0.7.0.1+gitr2908_55e924b8a842-lp152.2.3.1`	fixed
Ubuntu	containerd	16.04	`0.2.1-0ubuntu4~16.04`	vulnerable
Ubuntu	containerd	16.04	`0.2.3-0ubuntu1~16.04`	vulnerable
Ubuntu	containerd	16.04	`0.2.5-0ubuntu1~16.04.1`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.2`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.3`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.4`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.5`	vulnerable
Ubuntu	containerd	16.04	`1.2.6-0ubuntu1~16.04.6`	fixed
Ubuntu	containerd	18.04	`0.2.5-0ubuntu2`	vulnerable
Ubuntu	containerd	18.04	`1.2.6-0ubuntu1~18.04.1`	vulnerable
Ubuntu	containerd	18.04	`1.2.6-0ubuntu1~18.04.2`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.1`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.2`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.3`	vulnerable
Ubuntu	containerd	18.04	`1.3.3-0ubuntu1~18.04.4`	fixed
Ubuntu	containerd	20.04	`1.2.10-0ubuntu1`	vulnerable
Ubuntu	containerd	20.04	`1.3.2-0ubuntu1`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu1`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu2`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu2.1`	vulnerable
Ubuntu	containerd	20.04	`1.3.3-0ubuntu2.2`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	docker.io	source	sid	`20.10.0~rc1+dfsg2-1`	not yet assigned	Not reported	Not reported
Debian	docker.io	source	forky	`20.10.0~rc1+dfsg2-1`	not yet assigned	Not reported	Not reported
Debian	docker.io	source	trixie	`20.10.0~rc1+dfsg2-1`	not yet assigned	Not reported	Not reported
Debian	docker.io	source	bookworm	`20.10.0~rc1+dfsg2-1`	not yet assigned	Not reported	Not reported
Debian	containerd	source	sid	`1.4.3~ds1-1`	not yet assigned	Not reported	Not reported
Debian	containerd	source	forky	`1.4.3~ds1-1`	not yet assigned	Not reported	Not reported
Debian	containerd	source	trixie	`1.4.3~ds1-1`	not yet assigned	Not reported	Not reported
Debian	containerd	source	bookworm	`1.4.3~ds1-1`	not yet assigned	Not reported	Not reported
Ubuntu	containerd	deb	16.04	`1.2.6-0ubuntu1~16.04.5`	Not reported	USN-4653-1	Not reported
Ubuntu	containerd	deb	18.04	`1.3.3-0ubuntu1~18.04.3`	Not reported	USN-4653-1	Not reported
Ubuntu	containerd	deb	20.04	`1.3.3-0ubuntu2.1`	Not reported	USN-4653-1	Not reported
Ubuntu	containerd	deb	16.04	`1.2.6-0ubuntu1~16.04.6`	Not reported	USN-4653-2	Not reported
Ubuntu	containerd	deb	18.04	`1.3.3-0ubuntu1~18.04.4`	Not reported	USN-4653-2	Not reported
Ubuntu	containerd	deb	20.04	`1.3.3-0ubuntu2.2`	Not reported	USN-4653-2	Not reported
Suse	containerd	rpm	linux enterprise module for containers 15 sp2	`1.3.9-5.29.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker	rpm	linux enterprise module for containers 15 sp2	`19.03.15_ce-6.43.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker-runc	rpm	linux enterprise module for containers 15 sp2	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	linux enterprise module for containers 15 sp2	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	containerd	rpm	linux enterprise high performance computing 15 sp1-espos	`1.3.9-5.29.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker	rpm	linux enterprise high performance computing 15 sp1-espos	`19.03.15_ce-6.43.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker-runc	rpm	linux enterprise high performance computing 15 sp1-espos	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	linux enterprise high performance computing 15 sp1-espos	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	containerd	rpm	linux enterprise high performance computing 15 sp1-ltss	`1.3.9-5.29.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker	rpm	linux enterprise high performance computing 15 sp1-ltss	`19.03.15_ce-6.43.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker-runc	rpm	linux enterprise high performance computing 15 sp1-ltss	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	linux enterprise high performance computing 15 sp1-ltss	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	containerd	rpm	linux enterprise server 15 sp1-bcl	`1.3.9-5.29.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker	rpm	linux enterprise server 15 sp1-bcl	`19.03.15_ce-6.43.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker-runc	rpm	linux enterprise server 15 sp1-bcl	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	linux enterprise server 15 sp1-bcl	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	containerd	rpm	linux enterprise server 15 sp1-ltss	`1.3.9-5.29.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker	rpm	linux enterprise server 15 sp1-ltss	`19.03.15_ce-6.43.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker-runc	rpm	linux enterprise server 15 sp1-ltss	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	linux enterprise server 15 sp1-ltss	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	containerd	rpm	linux enterprise server for sap applications 15 sp1	`1.3.9-5.29.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker	rpm	linux enterprise server for sap applications 15 sp1	`19.03.15_ce-6.43.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker-runc	rpm	linux enterprise server for sap applications 15 sp1	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	linux enterprise server for sap applications 15 sp1	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	containerd	rpm	manager proxy 4.0	`1.3.9-5.29.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker	rpm	manager proxy 4.0	`19.03.15_ce-6.43.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker-runc	rpm	manager proxy 4.0	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	manager proxy 4.0	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	containerd	rpm	manager retail branch server 4.0	`1.3.9-5.29.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker	rpm	manager retail branch server 4.0	`19.03.15_ce-6.43.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker-runc	rpm	manager retail branch server 4.0	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	manager retail branch server 4.0	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	containerd	rpm	manager server 4.0	`1.3.9-5.29.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker	rpm	manager server 4.0	`19.03.15_ce-6.43.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker-runc	rpm	manager server 4.0	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	manager server 4.0	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	containerd	rpm	enterprise storage 6	`1.3.9-5.29.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker	rpm	enterprise storage 6	`19.03.15_ce-6.43.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	docker-runc	rpm	enterprise storage 6	`1.0.0rc10+gitr3981_dc9208a3303f-6.45.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	enterprise storage 6	`0.7.0.1+gitr2908_55e924b8a842-4.28.3`	Not reported	SUSE-SU-2021:0435-1	Not reported
Suse	containerd	rpm	linux enterprise module for containers 12	`1.3.9-16.32.1`	Not reported	SUSE-SU-2020:3938-1	Not reported
Suse	docker	rpm	linux enterprise module for containers 12	`19.03.14_ce-98.57.1`	Not reported	SUSE-SU-2020:3938-1	Not reported
Suse	docker-runc	rpm	linux enterprise module for containers 12	`1.0.0rc10+gitr3981_dc9208a3303f-1.49.1`	Not reported	SUSE-SU-2020:3938-1	Not reported
Suse	golang-github-docker-libnetwork	rpm	linux enterprise module for containers 12	`0.7.0.1+gitr2908_55e924b8a842-34.1`	Not reported	SUSE-SU-2020:3938-1	Not reported
Opensuse	containerd	rpm	leap 15.2	`1.3.9-lp152.2.3.1`	Not reported	OPENSUSE-SU-2021:0278-1	Not reported
Opensuse	docker	rpm	leap 15.2	`19.03.15_ce-lp152.2.3.1`	Not reported	OPENSUSE-SU-2021:0278-1	Not reported
Opensuse	docker-runc	rpm	leap 15.2	`1.0.0rc10+gitr3981_dc9208a3303f-lp152.2.3.1`	Not reported	OPENSUSE-SU-2021:0278-1	Not reported
Opensuse	fish	rpm	leap 15.2	`2.7.1-lp152.5.3.1`	Not reported	OPENSUSE-SU-2021:0278-1	Not reported
Opensuse	golang-github-docker-libnetwork	rpm	leap 15.2	`0.7.0.1+gitr2908_55e924b8a842-lp152.2.3.1`	Not reported	OPENSUSE-SU-2021:0278-1	Not reported
Ubuntu	containerd	deb	16.04	`1.2.6-0ubuntu1~16.04.6`	Not reported	UBUNTU-CVE-2020-15257	Not reported
Ubuntu	containerd	deb	18.04	`1.3.3-0ubuntu1~18.04.4`	Not reported	UBUNTU-CVE-2020-15257	Not reported
Ubuntu	containerd	deb	20.04	`1.3.3-0ubuntu2.2`	Not reported	UBUNTU-CVE-2020-15257	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[containerd]Unknown
Details (4)
- 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
- 1.6.20~ds1-1+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
- 1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
- 1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
[docker-doc]Unknown
Source package: [docker.io]
Details (2)
- 20.10.24+dfsg1-1+deb12u1 · all · bookworm
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12
- 20.10.24+dfsg1-1+deb12u1 · all · bookworm
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12
[docker.io]Unknown
Source package: [docker.io]
Details (2)
- 20.10.24+dfsg1-1+deb12u1+b6 · amd64 · bookworm
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12
- 20.10.24+dfsg1-1+deb12u1+b6 · arm64 · bookworm
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12
[golang-github-containerd-containerd-dev]Unknown
Source package: [containerd]
Details (4)
- 1.6.20~ds1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
- 1.6.20~ds1-1+deb12u3 · all · bookworm
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
- 1.6.20~ds1-1+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
- 1.6.20~ds1-1+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
[golang-github-docker-docker-dev]Unknown
Source package: [docker.io]
Details (2)
- 20.10.24+dfsg1-1+deb12u1 · all · bookworm
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12
- 20.10.24+dfsg1-1+deb12u1 · all · bookworm
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12

[Debian 13 (Trixie)]

[containerd]Unknown
Details (4)
- 1.7.24~ds1-6+deb13u1 · amd64 · trixie
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · 13
- 1.7.24~ds1-6+deb13u1 · arm64 · trixie
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · 13
- 1.7.24~ds1-6+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · 13
- 1.7.24~ds1-6+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · 13
[docker-cli]Unknown
Source package: [docker.io]
Details (4)
- 26.1.5+dfsg1-9+b13 · amd64 · trixie
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9+b13 · arm64 · trixie
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
[docker-doc]Unknown
Source package: [docker.io]
Details (4)
- 26.1.5+dfsg1-9 · all · trixie
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9 · all · trixie
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9+deb13u1 · all · trixie-security
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9+deb13u1 · all · trixie-security
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
[docker.io]Unknown
Details (4)
- 26.1.5+dfsg1-9+b13 · amd64 · trixie
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9+b13 · arm64 · trixie
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
[golang-github-containerd-containerd-dev]Unknown
Source package: [containerd]
Details (4)
- 1.7.24~ds1-6+deb13u1 · all · trixie
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · 13
- 1.7.24~ds1-6+deb13u1 · all · trixie
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · 13
- 1.7.24~ds1-6+deb13u1 · all · trixie-security
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · 13
- 1.7.24~ds1-6+deb13u1 · all · trixie-security
  Fixed · Fixed: 1.4.3~ds1-1
  dsa · containerd · debian · 13
[golang-github-docker-docker-dev]Unknown
Source package: [docker.io]
Details (4)
- 26.1.5+dfsg1-9 · all · trixie
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9 · all · trixie
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9+deb13u1 · all · trixie-security
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13
- 26.1.5+dfsg1-9+deb13u1 · all · trixie-security
  Fixed · Fixed: 20.10.0~rc1+dfsg2-1
  dsa · docker.io · debian · 13

Observed: Oct 23, 2026, 5:48:13 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]