CVE:CVE-2020-15157
CNNVD:CNNVD-202010-705
containerd是美国阿帕奇（Apache）软件基金会的一个容器守护进程。该进程根据 RunC OCI 规范负责控制宿主机上容器的完整周期。
containerd (an industry-standard container runtime) 1.2.14之前版本存在安全漏洞，该漏洞源于存在一个凭据泄漏漏洞，如果URL所在的服务器显示HTTP 401状态码以及注册特定的状态码，默认的containerd解析器将提供其身份验证凭据。
solution:Upgrade linuxfoundation containerd to a higher version than 1.2.14,1.3.0,1.3.0:beta0,1.3.0:beta1,1.3.0:beta2,1.3.0:rc0,1.3.0:rc1,1.3.0:rc2,1.3.0:rc3,and avoid the version [1.2.0,1.2.14),1.3.0,1.3.0:beta0,1.3.0:beta1,1.3.0:beta2,1.3.0:rc0,1.3.0:rc1,1.3.0:rc2,1.3.0:rc3; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,20.04,and avoid the version 16.04,18.04,20.04; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0