Database/Container, Kubernetes & orchestration
containerd: containerd-shim abstract-socket API exposed to host-network containers
CVE-2020-15257Container, Kubernetes & orchestrationcurated
Impact
containerd-shim abstract-socket API exposed to host-network containers; container escape to host root
Who can reach it
Any tenant pod running with hostNetwork:true
What to do
Upgrade containerd; drain node to restart shims. Also ban hostNetwork for tenant pods via policy
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.