Published: 07/12/2022 Updated: 31/01/2024

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

It exists that containerd incorrectly handled access to encrypted container images when using imgcrypt library. A remote attacker could possibly use this issue to access encrypted images from other users. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-24778)

Vulnerable Product	Search on Vulmon	Subscribe to Product
linuxfoundation containerd

Several security issues were fixed in containerd ...

containerd is an open source container runtime A bug was found in containerd's CRI implementation where a user can exhaust memory on the host In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested If the user's process fails to launch due to, for example, a faulty command, the goroutine will be s ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-401 https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9 https://github.com/containerd/containerd/commit/a05d175400b1145e5e6a735a6710579d181e7fb0 https://security.gentoo.org/glsa/202401-31 https://ubuntu.com/security/notices/USN-5776-1 https://nvd.nist.gov https://www.cisa.gov/news-events/ics-advisories/icsa-24-046-11

CVE-2022-23471

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect