Oval Definition:	oval:org.opensuse.security:def:202143816
Revision Date: 2022-09-02 Version: 1 Title: CVE-2021-43816 Description: containerd is an open source container runtime. On installations using SELinux, such as EL8 (CentOS, RHEL), Fedora, or SUSE MicroOS, with containerd since v1.5.0-beta.0 as the backing container runtime interface (CRI), an unprivileged pod scheduled to the node may bind mount, via hostPath volume, any privileged, regular file on disk for complete read/write access (sans delete). Such is achieved by placing the in-container location of the hostPath volume mount at either `/etc/hosts`, `/etc/hostname`, or `/etc/resolv.conf`. These locations are being relabeled indiscriminately to match the container process-label which effectively elevates permissions for savvy containers that would not normally be able to access privileged host files. This issue has been resolved in version 1.5.9. Users are advised to upgrade as soon as possible. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2021-43816 SUSE CVE-2021-43816 Platform(s): SUSE CaaS Platform 4.0 SUSE CaaS Platform 4.5 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 Product(s): Definition Synopsis Release Information SUSE CaaS Platform 4.0 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed AND Package Information containerd is not affected OR containerd-ctr is not affected Definition Synopsis Release Information SUSE CaaS Platform 4.5 is installed OR SUSE Linux Enterprise Module for Containers 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND containerd is not affected Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND containerd is not affected Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed AND Package Information containerd is not affected OR containerd-ctr is not affected Definition Synopsis Release Information SUSE Linux Enterprise Module for Containers 15 SP2 is installed OR SUSE Linux Enterprise Module for Containers 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND containerd is not affected Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise Module for Containers 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND containerd is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND containerd is not affected OR containerd-ctr is not affected Definition Synopsis Release Information SUSE Enterprise Storage 6 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed AND containerd is not affected Definition Synopsis Release Information SUSE Enterprise Storage 7 is installed OR SUSE Linux Enterprise Module for Containers 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND containerd is not affected Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Containers 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND Package Information containerd is not affected OR containerd-ctr is not affected Definition Synopsis SUSE Linux Enterprise Micro 5.0 is installed AND containerd is not affected Definition Synopsis SUSE Linux Enterprise Micro 5.1 is installed AND containerd is not affected Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise Module for Containers 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND containerd is not affected OR Package Information SUSE Enterprise Storage 7 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Containers 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND containerd is not affected OR containerd-ctr is not affected
BACK