linuxfoundation containerd vulnerabilities and exploits

(subscribe to this query)

6

CVSSv2

containerd is an open source container runtime. On installations using SELinux, such as EL8 (CentOS, RHEL), Fedora, or SUSE MicroOS, with containerd since v1.5.0-beta.0 as the backing container runtime interface (CRI), an unprivileged pod scheduled to the node may bind mount, via...

Linuxfoundation Containerd 1.5.0 Linuxfoundation Containerd Fedoraproject Fedora 34 Fedoraproject Fedora 35

NA

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's proces...

Linuxfoundation Containerd

NA

containerd is an open source container runtime. prior to 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could cause a denial of service. ...

Linuxfoundation Containerd

NA

containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group acces...

Linuxfoundation Containerd

6.8

CVSSv2

containerd is a container runtime. A bug was found in containerd versions before 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissi...

Linuxfoundation Containerd Fedoraproject Fedora 34

2.6

CVSSv2

In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific image layer (otherwise ...

Linuxfoundation Containerd Linuxfoundation Containerd 1.3.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Debian Debian Linux 10.0

3 Github repositories

4.3

CVSSv2

In containerd (an industry-standard container runtime) prior to 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service) that share the same image may re...

Linuxfoundation Containerd Fedoraproject Fedora 33 Fedoraproject Fedora 34

1 Github repository

3.6

CVSSv2

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd prior to 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that...

Linuxfoundation Containerd Fedoraproject Fedora 33 Debian Debian Linux 10.0

10 Github repositories1 Article

7.2

CVSSv2

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to tra...

Linuxfoundation Containerd Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 11.0

2.1

CVSSv2

containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the `ExecSync` API. This can cause containerd to cons...

Linuxfoundation Containerd Debian Debian Linux 11.0 Fedoraproject Fedora 35 Fedoraproject Fedora 36

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook