Containerd Bug Exposes Cloud Account Credentials

guest · Oct 27, 2020

Containerd Bug Exposes Cloud Account Credentials
The flaw (CVE-2020-15157) is located in the container image-pulling process
October 26, 2020
https://threatpost.com/containerd-bug-cloud-account-credentials/160546/

A security vulnerability can be exploited to coerce the containerd cloud platform into exposing the host’s registry or users’ cloud-account credentials.

Containerd bills itself as a runtime tool that “manages the complete container lifecycle of its host system, from image transfer and storage to container execution and supervision to low-level storage to network attachments and beyond.” As such, it offers deep visibility into a user’s cloud environment, across multiple vendors.
Click to expand...

The bug (CVE-2020-15157) is located in the container image-pulling process, according to Gal Singer, researcher at Aqua. Adversaries can exploit this vulnerability by building dedicated container images designed to steal the host’s token, then using the token to take over a cloud project, he explained.

“A container image is a combination of a manifest file and some individual layer files,” he wrote in a recent post.
The attackers can thus exploit the problem by crafting a malicious image in a remote registry, and then convincing the user to access it through containerd (this can be done through email and other social-engineering avenues), according to the National Vulnerability Database writeup.
Click to expand...

CVE-2020-15157: Vulnerability in Containerd Can Leak Cloud Credentials

A new vulnerability was found in containerd, located in the container image-pulling process. The new CVE includes manipulation of the image manifest, allowing attackers to craft an image that can leak the host’s registry or cloud credentials when pulled from a registry. This leak occurs even before the image is running any code on your server.
Conclusion
It's always good practice to periodically verify that you're using the latest version of software, as is the case here. To remediate against this CVE you should ensure your systems are running the latest version of their container runtimes. This vulnerability was patched in containerd 1.2.14, and containerd 1.3.x was also tested and validated as not vulnerable.
Click to expand...

Log in or Sign up

Containerd Bug Exposes Cloud Account Credentials

guest Guest

Log in or Sign up

Containerd Bug Exposes Cloud Account Credentials

guest Guest

Useful Searches