[{"uuid":"GSA_kwCzR0hTQS1ycDNoLWpmNzctcTlwNM4AB9Xk","url":"https://github.com/advisories/GHSA-rp3h-jf77-q9p4","title":"containerd: Unpack DoS via repeated opaque whiteouts","description":"### Impact\n\nA vulnerability exists in containerd's layer unpack handler where the processing of certain image layers causes superlinear time complexity. During the unpack operation, specific file configurations within the layer can trigger repeated directory traversals.\n\nConsequently, pulling or importing a maliciously crafted image can result in increased unpack times and a moderate increase in CPU usage. This delays container startup, even if the compressed image layers are small. Additionally, in orchestrators like Kubernetes that apply concurrency limits to image pulls, these excessively long operations can reduce the available concurrency for other pulls, potentially delaying unrelated container deployments.\n\n### Patches\n\nThis bug has been fixed in containerd 2.3.5, 2.2.8, 2.0.12, and 1.7.35. Users should update to these versions to resolve the issue.\n\n### Workarounds\n\nThere are no known workarounds for this issue. Users are advised to only pull and import trusted images from known registries until the patch can be applied.\n\n### Credits\n\nThe containerd project would like to thank Jakub Ciolek of AlphaSense for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-10-15T20:22:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.6,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-rp3h-jf77-q9p4","https://nvd.nist.gov/vuln/detail/CVE-2026-95838","https://github.com/containerd/containerd/commit/e6ca378dcfa610d06589a3ac96aa992de866e4f0","https://github.com/advisories/GHSA-rp3h-jf77-q9p4"],"source_kind":"github","identifiers":["GHSA-rp3h-jf77-q9p4","CVE-2026-95838"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-10-15T21:00:10.858Z","updated_at":"2026-10-16T22:01:12.268Z","epss_percentage":0.00215,"epss_percentile":0.10971,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ycDNoLWpmNzctcTlwNM4AB9Xk","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ycDNoLWpmNzctcTlwNM4AB9Xk","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd/v2","versions":[{"first_patched_version":"2.3.5","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.5"},{"first_patched_version":"2.2.8","vulnerable_version_range":"\u003e= 2.2.0, \u003c 2.2.8"},{"first_patched_version":"2.0.12","vulnerable_version_range":"\u003c 2.0.12"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd%2Fv2"},{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.7.35","vulnerable_version_range":"\u003c 1.7.35"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ycDNoLWpmNzctcTlwNM4AB9Xk/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wZzU3LTZqd2ctcTY0Nc4AB6vS","url":"https://github.com/advisories/GHSA-pg57-6jwg-q645","title":"Containerd has image-pull DoS via crafted OCI index graph amplification","description":"### Impact\n\nA vulnerability exists in containerd's image pull handlers where a crafted OCI image index containing deeply nested or heavily fanned-out descriptor graphs can cause unbounded CPU and memory consumption. During the `PullImage` operation, the recursive traversal and processing of child descriptors lack sufficient depth and breadth limits, and fail to adequately deduplicate identical descriptors. This unbounded traversal leads to excessive resource allocation.\n\nConsequently, pulling a malicious image reference can result in prolonged stalls during container creation and significant resource pressure on the host system. This issue occurs entirely during the image pull phase, prior to any container execution.\n\n### Patches\n\nThis bug has been fixed in containerd 2.4.1, 2.3.6, 2.2.9, 2.0.13, and 1.7.36. Users should update to these versions to resolve the issue.\n\n### Workarounds\n\nThere are no known workarounds for this issue. Users are advised to only pull trusted images from known registries until the patch can be applied.\n\n### Credits\n\nThe containerd project would like to thank Jakub Ciolek at ElevenLabs and @jlgore who independently discovered and responsibly disclosed this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-09-25T19:27:59.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-pg57-6jwg-q645","https://nvd.nist.gov/vuln/detail/CVE-2026-53493","https://github.com/containerd/containerd/commit/4f5f32636d47f051751065cf824a10da70c619fe","https://github.com/containerd/containerd/commit/94e83c14c8aac963e24e28105dab9c9af812a2a8","https://github.com/containerd/containerd/releases/tag/v1.7.36","https://github.com/containerd/containerd/releases/tag/v2.0.13","https://github.com/containerd/containerd/releases/tag/v2.2.9","https://github.com/containerd/containerd/releases/tag/v2.3.6","https://github.com/containerd/containerd/releases/tag/v2.4.1","https://github.com/advisories/GHSA-pg57-6jwg-q645"],"source_kind":"github","identifiers":["GHSA-pg57-6jwg-q645","CVE-2026-53493"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-09-25T20:00:09.342Z","updated_at":"2026-10-16T22:02:02.654Z","epss_percentage":0.00356,"epss_percentile":0.27502,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wZzU3LTZqd2ctcTY0Nc4AB6vS","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wZzU3LTZqd2ctcTY0Nc4AB6vS","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd/v2","versions":[{"first_patched_version":"2.4.1","vulnerable_version_range":"= 2.4.0"},{"first_patched_version":"2.3.6","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.6"},{"first_patched_version":"2.2.9","vulnerable_version_range":"\u003e= 2.1.0, \u003c 2.2.9"},{"first_patched_version":"2.0.13","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.0.13"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd%2Fv2"},{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.7.36","vulnerable_version_range":"\u003c= 1.7.35"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wZzU3LTZqd2ctcTY0Nc4AB6vS/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03anhoLTM2cTUtZ2Nxds4ABvLo","url":"https://github.com/advisories/GHSA-7jxh-36q5-gcqv","title":"containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service","description":"### Impact\n\nA bug in containerd's CRI ExecSync implementation allows exec probes and lifecycle hooks with background child processes to keep containerd's stdio-drain goroutines indefinitely blocked. Because the I/O drain phase lacks a default timeout or context cancellation handling, repeated ExecSync invocations (like probes) that include long-lived background processes against a container can cause containerd to leak goroutines and host memory. Over time, this resource exhaustion can cause the containerd daemon to be terminated by the OOM killer, rendering containerd unavailable until it is restarted. This issue affects containerd on Linux systems running with the CRI plugin enabled. Users not using containerd's CRI implementation or not running containers on Linux are not affected.\n\n### Patches\n\nThis bug has been fixed in containerd 2.3.5, 2.2.8, 2.0.12, and 1.7.35. Users should update to these versions to resolve the issue.\n\n### Workarounds\n\nEnsure exec probes and lifecycle hooks do not launch long-lived background child processes.\n\n### Credits\n\nThe containerd project would like to thank XlabAI Team of Tencent Xuanwu Lab (xlabai@tencent.com), including Guannan Wang, Zhanpeng Liu, Jiashuo Liang, and Guancheng Li, and @IamwhatIamSY who independently discovered and responsibly disclosed this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### For more information\n\nIf there are any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Send an email to [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Send an email to [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-09-09T18:01:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.8,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-7jxh-36q5-gcqv","https://github.com/containerd/containerd/releases/tag/v1.7.35","https://github.com/containerd/containerd/releases/tag/v2.0.12","https://github.com/containerd/containerd/releases/tag/v2.2.8","https://github.com/containerd/containerd/releases/tag/v2.3.5","https://github.com/advisories/GHSA-7jxh-36q5-gcqv"],"source_kind":"github","identifiers":["GHSA-7jxh-36q5-gcqv","CVE-2026-53495"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-09-09T19:00:08.770Z","updated_at":"2026-10-16T22:02:29.968Z","epss_percentage":0.00162,"epss_percentile":0.04651,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03anhoLTM2cTUtZ2Nxds4ABvLo","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03anhoLTM2cTUtZ2Nxds4ABvLo","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd/v2","versions":[{"first_patched_version":"2.3.5","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.5"},{"first_patched_version":"2.2.8","vulnerable_version_range":"\u003e= 2.2.0, \u003c 2.2.8"},{"first_patched_version":"2.0.12","vulnerable_version_range":"\u003c 2.0.12"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd%2Fv2"},{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.7.35","vulnerable_version_range":"\u003c 1.7.35"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03anhoLTM2cTUtZ2Nxds4ABvLo/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14aGY1LTd3anYtcHF4cM4ABZLf","url":"https://github.com/advisories/GHSA-xhf5-7wjv-pqxp","title":"containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull","description":"### Impact\nA bug was found in containerd where the CRI plugin propagates labels from an image config (`LABEL` instruction in Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host, via a plugin that consumes container labels for some operations.\n\n### Patches\nThis bug has been fixed in the following containerd versions:\n\n* 2.3.2\n* 2.2.5\n* 2.1.9\n* 2.0.10\n* 1.7.33\n\nUsers should update to these versions to resolve the issue.\n\n### Workarounds\nEnsure that only trusted images are used.\n\n### Credits\nThe containerd project would like to thank Anthropic Research, in collaboration with Claude, the GKE Security Team using Gemini, and Robert Prast (@robertprast) for independently discovering and responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-06-19T19:35:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp","https://github.com/advisories/GHSA-xhf5-7wjv-pqxp"],"source_kind":"github","identifiers":["GHSA-xhf5-7wjv-pqxp","CVE-2026-53488"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-19T20:00:08.096Z","updated_at":"2026-10-16T22:04:46.560Z","epss_percentage":0.00176,"epss_percentile":0.06598,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14aGY1LTd3anYtcHF4cM4ABZLf","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS14aGY1LTd3anYtcHF4cM4ABZLf","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd/v2","versions":[{"first_patched_version":"2.3.2","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.2"},{"first_patched_version":"2.2.5","vulnerable_version_range":"\u003e= 2.2.0, \u003c 2.2.5"},{"first_patched_version":"2.1.9","vulnerable_version_range":"\u003e= 2.1.0, \u003c 2.1.9"},{"first_patched_version":"2.0.10","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.0.10"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd%2Fv2"},{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.7.33","vulnerable_version_range":"\u003e= 1.7.0, \u003c 1.7.33"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14aGY1LTd3anYtcHF4cM4ABZLf/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qcGNjLXAyOWctcDhtcc4ABZLS","url":"https://github.com/advisories/GHSA-jpcc-p29g-p8mq","title":"containerd image-triggered runtime DoS via unbounded group parsing","description":"### Impact\nA vulnerability in containerd allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker Engine or Kubernetes control-plane components.\n\n### Patches\nThis bug has been fixed in the following containerd versions:\n\n* 2.3.2\n* 2.2.5\n* 2.1.9\n* 2.0.10\n* 1.7.33\n\nUsers should update to these versions to resolve the issue.\n\n### Workarounds\nEnsure that only trusted images are used and that only trusted users have permissions to import images or schedule pods. \n\n### Credits\n\nThe containerd project would like to thank Jakub Ciolek (@jake-ciolek) at AlphaSense and Kyle Elliott @ Trail of Bits who independently discovered and responsibly disclosed this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-06-19T19:34:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq","https://github.com/advisories/GHSA-jpcc-p29g-p8mq"],"source_kind":"github","identifiers":["GHSA-jpcc-p29g-p8mq","CVE-2026-47262"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-19T20:00:08.096Z","updated_at":"2026-10-16T22:04:46.570Z","epss_percentage":0.00265,"epss_percentile":0.16631,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qcGNjLXAyOWctcDhtcc4ABZLS","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qcGNjLXAyOWctcDhtcc4ABZLS","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd/v2","versions":[{"first_patched_version":"2.3.2","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.2"},{"first_patched_version":"2.2.5","vulnerable_version_range":"\u003e= 2.2.0, \u003c 2.2.5"},{"first_patched_version":"2.1.9","vulnerable_version_range":"\u003e= 2.1.0, \u003c 2.1.9"},{"first_patched_version":"2.0.10","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.0.10"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd%2Fv2"},{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.7.33","vulnerable_version_range":"\u003e= 1.7.0, \u003c 1.7.33"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qcGNjLXAyOWctcDhtcc4ABZLS/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mcXc2LWdmNTktcXI0d84ABXO8","url":"https://github.com/advisories/GHSA-fqw6-gf59-qr4w","title":"containerd user ID handling bypass allows runAsNonRoot evasion","description":"### Impact\nA bug was found in containerd where containers launched with a numeric `User` directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username. If a crafted image provides an `/etc/passwd` file mapping this large numeric string to root, the container ultimately runs as root (UID 0). This allows the Kubernetes `runAsNonRoot` restriction to be bypassed, causing unexpected behavior for environments that require containers to run as a non-root user.\n\n### Patches\nThis bug has been fixed in the following containerd versions:\n\n* 2.3.1\n* 2.2.4\n* 2.0.9\n* 1.7.32\n\nNote: The containerd 2.1 release has reached its [end of life](https://containerd.io/releases/#current-state-of-containerd-releases) and a fixed version is not provided.\n\nUsers should update to these versions to resolve the issue.\n\n### Workarounds\nEnsure that only trusted images are used and that only trusted users have permissions to import images. Alternatively, enforcing a specific numeric `runAsUser` in the Kubernetes Pod `securityContext` overrides the `USER` directive in the image and prevents the bypass. Newer versions of Kubernetes, starting with 1.34, also appear to enforce `runAsNonRoot` properly regardless of this bug.\n\n### Credits\nThe containerd project would like to thank Lei Wang (@ssst0n3) for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### Resources\n* https://github.com/advisories/GHSA-265r-hfxg-fhmg (CVE-2024-40635)\n\n### For more information\n\nIf there are any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Send an email to [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Send an email to [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-21T21:40:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-fqw6-gf59-qr4w","https://nvd.nist.gov/vuln/detail/CVE-2026-46680","https://github.com/advisories/GHSA-fqw6-gf59-qr4w"],"source_kind":"github","identifiers":["GHSA-fqw6-gf59-qr4w","CVE-2026-46680"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-21T22:00:08.306Z","updated_at":"2026-10-16T22:05:59.220Z","epss_percentage":0.00163,"epss_percentile":0.04813,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mcXc2LWdmNTktcXI0d84ABXO8","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mcXc2LWdmNTktcXI0d84ABXO8","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd/v2","versions":[{"first_patched_version":"2.3.1","vulnerable_version_range":"\u003e= 2.3.0-beta.0, \u003c 2.3.1"},{"first_patched_version":"2.2.4","vulnerable_version_range":"\u003e= 2.1.0-beta.0, \u003c 2.2.4"},{"first_patched_version":"2.0.9","vulnerable_version_range":"\u003e= 2.0.4, \u003c 2.0.9"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd%2Fv2"},{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.7.32","vulnerable_version_range":"\u003e= 1.7.27, \u003c 1.7.32"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mcXc2LWdmNTktcXI0d84ABXO8/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tNmhxLXAyNXAtZmZyMs4ABOS-","url":"https://github.com/advisories/GHSA-m6hq-p25p-ffr2","title":"containerd CRI server: Host memory exhaustion through Attach goroutine leak","description":"### Impact\n\nA bug was found in containerd's CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. \n\nRepetitive calls of CRI Attach (e.g., [`kubectl attach`](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_attach/)) could increase the memory usage of containerd.\n\n### Patches\n\nThis bug has been fixed in the following containerd versions:\n\n* 2.2.0\n* 2.1.5\n* 2.0.7\n* 1.7.29\n\nUsers should update to these versions to resolve the issue.\n\n### Workarounds\n\nSet up an admission controller to control accesses to `pods/attach` resources.\ne.g., [Validating Admission Policy](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/).\n\n### Credits\n\nThe containerd project would like to thank @Wheat2018 for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### References\n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64329\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-11-06T23:32:23.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2","https://github.com/containerd/containerd/commit/083b53cd6f19b5de7717b0ce92c11bdf95e612df","https://nvd.nist.gov/vuln/detail/CVE-2025-64329","https://github.com/advisories/GHSA-m6hq-p25p-ffr2"],"source_kind":"github","identifiers":["GHSA-m6hq-p25p-ffr2","CVE-2025-64329"],"repository_url":"https://github.com/containerd/containerd","blast_radius":30.50679605935139,"created_at":"2025-11-07T00:00:44.400Z","updated_at":"2026-10-16T22:10:55.543Z","epss_percentage":0.00171,"epss_percentile":0.05913,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tNmhxLXAyNXAtZmZyMs4ABOS-","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tNmhxLXAyNXAtZmZyMs4ABOS-","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd/v2","versions":[{"first_patched_version":"2.2.0","vulnerable_version_range":"\u003e= 2.2.0-beta.0, \u003c 2.2.0"},{"first_patched_version":"2.1.5","vulnerable_version_range":"\u003e= 2.1.0-beta.0, \u003c 2.1.5"},{"first_patched_version":"2.0.7","vulnerable_version_range":"\u003c 2.0.7"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd%2Fv2"},{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.7.29","vulnerable_version_range":"\u003c 1.7.29"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tNmhxLXAyNXAtZmZyMs4ABOS-/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wd2hjLXJwcTktNGM4d84ABOP1","url":"https://github.com/advisories/GHSA-pwhc-rpq9-4c8w","title":"containerd affected by a local privilege escalation via wide permissions on CRI directory","description":"### Impact\n\nAn overly broad default permission vulnerability was found in containerd.\n\n- `/var/lib/containerd` was created with the permission bits 0o711, while it should be created with 0o700\n  - Allowed local users on the host to potentially access the metadata store and the content store\n- `/run/containerd/io.containerd.grpc.v1.cri` was created with 0o755, while it should be created with 0o700\n  - Allowed local users on the host to potentially access the contents of Kubernetes local volumes. The contents of volumes might include setuid binaries, which could allow a local user on the host to elevate privileges on the host.\n- `/run/containerd/io.containerd.sandbox.controller.v1.shim` was created with 0o711, while it should be created with 0o700\n\nThe directory paths may differ depending on the daemon configuration.\nWhen the `temp` directory path is specified in the daemon configuration, that directory was also created with 0o711, while it should be created with 0o700.\n\n### Patches\n\nThis bug has been fixed in the following containerd versions:\n\n* 2.2.0\n* 2.1.5\n* 2.0.7\n* 1.7.29\n\nUsers should update to these versions to resolve the issue.\nThese updates automatically change the permissions of the existing directories.\n\n\u003e [!NOTE]\n\u003e\n\u003e `/run/containerd` and `/run/containerd/io.containerd.runtime.v2.task` are still created with 0o711.\n\u003e This is an expected behavior for supporting userns-remapped containers.\n\n### Workarounds\n\nThe system administrator on the host can manually chmod the directories to not \nhave group or world accessible permisisons:\n\n```\nchmod 700 /var/lib/containerd\nchmod 700 /run/containerd/io.containerd.grpc.v1.cri\nchmod 700 /run/containerd/io.containerd.sandbox.controller.v1.shim\n```\n\nAn alternative mitigation would be to run containerd in [rootless mode](https://github.com/containerd/containerd/blob/main/docs/rootless.md).\n\n### Credits\n\nThe containerd project would like to thank David Leadbeater for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-11-06T15:12:08.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","references":["https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w","https://github.com/containerd/containerd/commit/7c59e8e9e970d38061a77b586b23655c352bfec5","https://nvd.nist.gov/vuln/detail/CVE-2024-25621","https://github.com/containerd/containerd/blob/main/docs/rootless.md","https://github.com/advisories/GHSA-pwhc-rpq9-4c8w"],"source_kind":"github","identifiers":["GHSA-pwhc-rpq9-4c8w","CVE-2024-25621"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2025-11-06T16:00:25.757Z","updated_at":"2026-10-16T22:10:58.681Z","epss_percentage":0.00168,"epss_percentile":0.05569,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wd2hjLXJwcTktNGM4d84ABOP1","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wd2hjLXJwcTktNGM4d84ABOP1","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd/v2","versions":[{"first_patched_version":"2.2.0","vulnerable_version_range":"\u003e= 2.2.0-beta.0, \u003c 2.2.0"},{"first_patched_version":"2.1.5","vulnerable_version_range":"\u003e= 2.1.0-beta.0, \u003c 2.1.5"},{"first_patched_version":"2.0.7","vulnerable_version_range":"\u003c 2.0.7"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd%2Fv2"},{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.7.29","vulnerable_version_range":"\u003c 1.7.29"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wd2hjLXJwcTktNGM4d84ABOP1/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0yNjVyLWhmeGctZmhtZ84ABFj6","url":"https://github.com/advisories/GHSA-265r-hfxg-fhmg","title":"containerd has an integer overflow in User ID handling","description":"### Impact\nA bug was found in containerd where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user.\n\n### Patches\nThis bug has been fixed in the following containerd versions: \n\n* 2.0.4 (Fixed in https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20)\n* 1.7.27 (Fixed in https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da)\n* 1.6.38 (Fixed in https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a)\n\nUsers should update to these versions to resolve the issue.\n\n### Workarounds\nEnsure that only trusted images are used and that only trusted users have permissions to import images.\n\n### Credits\nThe containerd project would like to thank [Benjamin Koltermann](https://github.com/p4ck3t0) and [emxll](https://github.com/emxll) for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### References\n* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40635\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-03-17T21:24:42.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.6,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg","https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da","https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20","https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a","https://nvd.nist.gov/vuln/detail/CVE-2024-40635","https://lists.debian.org/debian-lts-announce/2025/05/msg00005.html","https://github.com/advisories/GHSA-265r-hfxg-fhmg"],"source_kind":"github","identifiers":["GHSA-265r-hfxg-fhmg","CVE-2024-40635"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2025-03-17T22:07:28.275Z","updated_at":"2026-10-16T23:10:39.774Z","epss_percentage":0.003,"epss_percentile":0.20859,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yNjVyLWhmeGctZmhtZ84ABFj6","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0yNjVyLWhmeGctZmhtZ84ABFj6","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.6.38","vulnerable_version_range":"\u003c 1.6.38"},{"first_patched_version":"1.7.27","vulnerable_version_range":"\u003e= 1.7.0-beta.0, \u003c 1.7.27"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"},{"ecosystem":"go","package_name":"github.com/containerd/containerd/v2","versions":[{"first_patched_version":"2.0.4","vulnerable_version_range":"\u003c 2.0.4"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd%2Fv2"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yNjVyLWhmeGctZmhtZ84ABFj6/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jOWNwLTljNzUtOXY4Y84AA8Eg","url":"https://github.com/advisories/GHSA-c9cp-9c75-9v8c","title":"containerd started with non-empty inheritable Linux process capabilities","description":"### Impact\n\nA bug was found in containerd where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during `execve(2)`.  Normally, when executable programs have specified permitted file capabilities, otherwise unprivileged users and processes can execute those programs and gain the specified file capabilities up to the bounding set.  Due to this bug, containers which included executable programs with inheritable file capabilities allowed otherwise unprivileged users and processes to additionally gain these inheritable file capabilities up to the container's bounding set.  Containers which use Linux users and groups to perform privilege separation inside the container are most directly impacted.\n\nThis bug did not affect the container security sandbox as the inheritable set never contained more capabilities than were included in the container's bounding set.\n\n\n### Patches\n\nThis bug has been fixed in containerd 1.5.11 and 1.6.2.  Users should update to these versions as soon as possible.  Running containers should be stopped, deleted, and recreated for the inheritable capabilities to be reset.\n\nThis fix changes containerd behavior such that containers are started with a more typical Linux environment.  Refer to `capabilities(7)` for a description of how capabilities work.  Note that permitted file capabilities continue to allow for privileges to be raised up to the container's bounding set and that processes may add capabilities to their own inheritable set up to the container's bounding set per the rules described in the manual page.  In all cases the container's bounding set provides an upper bound on the capabilities that can be assumed and provides for the container security sandbox.\n\n### Workarounds\n\nThe entrypoint of a container can be modified to use a utility like `capsh(1)` to drop inheritable capabilities prior to the primary process starting.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* [Open an issue](https://github.com/containerd/containerd/issues/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io) if you think you’ve found a security bug","origin":"UNSPECIFIED","severity":"LOW","published_at":"2024-05-14T22:04:56.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c","https://github.com/containerd/containerd/commit/e9af808591ee1468f9b0ad6a0d41fdf93ee0c1bc","https://github.com/advisories/GHSA-c9cp-9c75-9v8c"],"source_kind":"github","identifiers":["GHSA-c9cp-9c75-9v8c"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2024-05-14T23:05:44.075Z","updated_at":"2026-10-07T16:09:46.150Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jOWNwLTljNzUtOXY4Y84AA8Eg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jOWNwLTljNzUtOXY4Y84AA8Eg","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.6.2","vulnerable_version_range":"\u003e= 1.6.0, \u003c 1.6.2"},{"first_patched_version":"1.5.11","vulnerable_version_range":"\u003c 1.5.11"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jOWNwLTljNzUtOXY4Y84AA8Eg/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02ZzJxLXc1ajMtZndoNM4AA4-2","url":"https://github.com/advisories/GHSA-6g2q-w5j3-fwh4","title":"containerd environment variable leak","description":"## Impact\n\nContainers launched through containerd's CRI implementation (through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service) that share the same image may receive incorrect environment variables, including values that are defined for other containers.  If the affected containers have different security contexts, this may allow sensitive information to be unintentionally shared.\n\nIf you are not using containerd’s CRI implementation (through one of the mechanisms described above), you are not vulnerable to this issue.\n\nIf you are not launching multiple containers or Kubernetes pods from the same image which have different environment variables, you are not vulnerable to this issue.\n\nIf you are not launching multiple containers or Kubernetes pods from the same image in rapid succession, you have reduced likelihood of being vulnerable to this issue\n\n## Patches\n\nThis vulnerability has been fixed in containerd 1.3.10 and containerd 1.4.4.  Users should update to these versions as soon as they are released.\n\n## Workarounds\n\nThere are no known workarounds.\n\n## For more information\n\nIf you have any questions or comments about this advisory:\n\n* [Open an issue](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at security@containerd.io if you think you’ve found a security bug.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-01-31T23:22:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.3,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-6g2q-w5j3-fwh4","https://nvd.nist.gov/vuln/detail/CVE-2021-21334","https://github.com/containerd/cri/pull/1628","https://github.com/containerd/cri/pull/1629","https://github.com/containerd/containerd/commit/05f951a3781f4f2c1911b05e61c160e9c30eaa8e","https://github.com/containerd/containerd/commit/2d9c8aa4b3f4313982c5c999af57212a1c5d144b","https://github.com/containerd/containerd/commit/cbcb2f57fbe221986f96b552855eb802f63193de","https://github.com/containerd/containerd/releases/tag/v1.3.10","https://github.com/containerd/containerd/releases/tag/v1.4.4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUE2Z2ZUWBHRU36ZGBD2YSJCYB6ELPXE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QIBPKSX5IOWPM3ZPFB3JVLXWDHSZTTWT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VTXHA5JOWQRCCUZH7ZQBEYN6KZKJEYSD/","https://security.gentoo.org/glsa/202105-33","https://github.com/advisories/GHSA-6g2q-w5j3-fwh4"],"source_kind":"github","identifiers":["GHSA-6g2q-w5j3-fwh4","CVE-2021-21334"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2024-02-01T00:05:34.178Z","updated_at":"2026-10-16T06:11:00.183Z","epss_percentage":0.02027,"epss_percentile":0.8051,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02ZzJxLXc1ajMtZndoNM4AA4-2","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02ZzJxLXc1ajMtZndoNM4AA4-2","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.3.10","vulnerable_version_range":"\u003c 1.3.10"},{"first_patched_version":"1.4.4","vulnerable_version_range":"\u003e= 1.4.0, \u003c 1.4.4"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02ZzJxLXc1ajMtZndoNM4AA4-2/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03d3c1LTR3cWMtbTkyY84AA36e","url":"https://github.com/advisories/GHSA-7ww5-4wqc-m92c","title":"containerd allows RAPL to be accessible to a container","description":"# /sys/devices/virtual/powercap accessible by default to containers\n\nIntel's RAPL (Running Average Power Limit) feature, introduced by the Sandy Bridge microarchitecture, provides software insights into hardware energy consumption. To facilitate this, Intel introduced the powercap framework in Linux kernel 3.13, which reads values via relevant MSRs (model specific registers) and provides unprivileged userspace access via `sysfs`. As RAPL is an interface to access a hardware feature, it is only available when running on bare metal with the module compiled into the kernel.\n\nBy 2019, it was realized that in some cases unprivileged access to RAPL readings could be exploited as a power-based side-channel against security features including AES-NI (potentially inside a SGX enclave) and KASLR (kernel address space layout randomization). Also known as the [PLATYPUS attack](https://platypusattack.com/), Intel assigned [CVE-2020-8694](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8694) and [CVE-2020-8695](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8695), and AMD assigned [CVE-2020-12912](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12912).\n\nSeveral mitigations were applied; Intel reduced the sampling resolution via a microcode update, and the Linux kernel [prevents access by non-root users](https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=949dd0104c496fa7c14991a23c03c62e44637e71) since 5.10. However, this kernel-based mitigation does not apply to many container-based scenarios:\n* Unless using user namespaces, root inside a container has the same level of privilege as root outside the container, but with a slightly more narrow view of the system\n* `sysfs` is mounted inside containers read-only; however only read access is needed to carry out this attack on an unpatched CPU\n\nWhile this is not a direct vulnerability in container runtimes, defense in depth and safe defaults are valuable and preferred, especially as this poses a risk to multi-tenant container environments. This is provided by masking `/sys/devices/virtual/powercap` in the default mount configuration, and adding an additional set of rules to deny it in the default AppArmor profile.\n\nWhile `sysfs` is not the only way to read from the RAPL subsystem, other ways of accessing it require additional capabilities such as `CAP_SYS_RAWIO` which is not available to containers by default, or `perf` paranoia level less than 1, which is a non-default kernel tunable.\n\n## References\n\n* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8694\n* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8695\n* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12912\n* https://platypusattack.com/\n* https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=949dd0104c496fa7c14991a23c03c62e44637e71\n* https://web.eece.maine.edu/~vweaver/projects/rapl/","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-12-19T21:17:06.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c","https://github.com/containerd/containerd/commit/67d356cb3095f3e8f8ad7d36f9a733fea1e7e28c","https://github.com/containerd/containerd/commit/746b910f05855c8bfdb4415a1c0f958b234910e5","https://github.com/advisories/GHSA-7ww5-4wqc-m92c"],"source_kind":"github","identifiers":["GHSA-7ww5-4wqc-m92c"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2023-12-19T22:05:55.947Z","updated_at":"2026-10-12T12:16:58.200Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03d3c1LTR3cWMtbTkyY84AA36e","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03d3c1LTR3cWMtbTkyY84AA36e","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.7.11","vulnerable_version_range":"\u003e= 1.7.0, \u003c= 1.7.10"},{"first_patched_version":"1.6.26","vulnerable_version_range":"\u003c= 1.6.25"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03d3c1LTR3cWMtbTkyY84AA36e/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0yNTl3LThoZjYtNTljMs4AAxql","url":"https://github.com/advisories/GHSA-259w-8hf6-59c2","title":"OCI image importer memory exhaustion in github.com/containerd/containerd","description":"### Impact\nWhen importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could cause a denial of service.\n\n### Patches\n\nThis bug has been fixed in containerd 1.6.18 and 1.5.18.  Users should update to these versions to resolve the issue.\n\n### Workarounds\n\nEnsure that only trusted images are used and that only trusted users have permissions to import images. \n\n### Credits\n\nThe containerd project would like to thank [David Korczynski](https://github.com/DavidKorczynski) and [Adam Korczynski](https://github.com/AdamKorcz) of ADA Logics for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md) during a security fuzzing audit sponsored by CNCF.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-02-16T14:12:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.5,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","references":["https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2","https://nvd.nist.gov/vuln/detail/CVE-2023-25153","https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4","https://github.com/containerd/containerd/releases/tag/v1.5.18","https://github.com/containerd/containerd/releases/tag/v1.6.18","https://pkg.go.dev/vuln/GO-2023-1573","https://github.com/advisories/GHSA-259w-8hf6-59c2"],"source_kind":"github","identifiers":["GHSA-259w-8hf6-59c2","CVE-2023-25153"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2023-02-16T15:03:13.150Z","updated_at":"2026-10-16T06:08:50.346Z","epss_percentage":0.00363,"epss_percentile":0.28512,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yNTl3LThoZjYtNTljMs4AAxql","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0yNTl3LThoZjYtNTljMs4AAxql","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.5.18","vulnerable_version_range":"\u003c 1.5.18"},{"first_patched_version":"1.6.18","vulnerable_version_range":"\u003e= 1.6.0, \u003c 1.6.18"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yNTl3LThoZjYtNTljMs4AAxql/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1obWZ4LTNwY3gtNjUzcM4AAxqj","url":"https://github.com/advisories/GHSA-hmfx-3pcx-653p","title":"Supplementary groups are not set up properly in github.com/containerd/containerd","description":"### Impact\n\nA bug was found in containerd where supplementary groups are not set up properly inside a container.  If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container.\n\nDownstream applications that use the containerd client library may be affected as well.\n\n### Patches\nThis bug has been fixed in containerd v1.6.18 and v.1.5.18.  Users should update to these versions and recreate containers to resolve this issue.  Users who rely on a downstream application that uses containerd's client library should check that application for a separate advisory and instructions.\n\n### Workarounds\n\nEnsure that the `\"USER $USERNAME\"` Dockerfile instruction is not used.  Instead, set the container entrypoint to a value similar to `ENTRYPOINT [\"su\", \"-\", \"user\"]` to allow `su` to properly set up supplementary groups.\n\n### References\n\n- https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/\n- Docker/Moby: CVE-2022-36109, fixed in Docker 20.10.18\n- CRI-O: CVE-2022-2995, fixed in CRI-O 1.25.0\n- Podman: CVE-2022-2989, fixed in Podman 3.0.1 and 4.2.0\n- Buildah: CVE-2022-2990, fixed in Buildah 1.27.1\n\nNote that CVE IDs apply to a particular implementation, even if an issue is common.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-02-16T14:11:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","references":["https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p","https://github.com/moby/moby/security/advisories/GHSA-rc4r-wh2q-q6c4","https://nvd.nist.gov/vuln/detail/CVE-2023-25173","https://github.com/containerd/containerd/commit/133f6bb6cd827ce35a5fb279c1ead12b9d21460a","https://github.com/advisories/GHSA-4wjj-jwc9-2x96","https://github.com/advisories/GHSA-fjm8-m7m6-2fjp","https://github.com/advisories/GHSA-phjr-8j92-w5v7","https://github.com/containerd/containerd/releases/tag/v1.5.18","https://github.com/containerd/containerd/releases/tag/v1.6.18","https://pkg.go.dev/vuln/GO-2023-1574","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI","https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation","https://github.com/advisories/GHSA-hmfx-3pcx-653p"],"source_kind":"github","identifiers":["GHSA-hmfx-3pcx-653p","CVE-2023-25173"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2023-02-16T15:03:13.193Z","updated_at":"2026-10-03T14:11:57.423Z","epss_percentage":0.00542,"epss_percentile":0.4353,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1obWZ4LTNwY3gtNjUzcM4AAxqj","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1obWZ4LTNwY3gtNjUzcM4AAxqj","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.5.18","vulnerable_version_range":"\u003c 1.5.18"},{"first_patched_version":"1.6.18","vulnerable_version_range":"\u003e= 1.6.0, \u003c 1.6.18"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1obWZ4LTNwY3gtNjUzcM4AAxqj/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0ycWpwLTQyNWotNTJqOc4AAwM4","url":"https://github.com/advisories/GHSA-2qjp-425j-52j9","title":"containerd CRI stream server vulnerable to host memory exhaustion via terminal","description":"### Impact\n\nA bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, for example, a faulty command, the goroutine will be stuck waiting to send without a receiver, resulting in a memory leak. Kubernetes and crictl can both be configured to use containerd's CRI implementation and the stream server is used for handling container IO.\n\n### Patches\n\nThis bug has been fixed in containerd 1.6.12 and 1.5.16.  Users should update to these versions to resolve the issue.\n\n### Workarounds\n\nEnsure that only trusted images and commands are used and that only trusted users have permissions to execute commands in running containers. \n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-07T23:23:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.7,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","references":["https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9","https://github.com/containerd/containerd/commit/241563be06a3de8b6a849414c4e805b68d3bb295","https://github.com/containerd/containerd/releases/tag/v1.5.16","https://github.com/containerd/containerd/releases/tag/v1.6.12","https://nvd.nist.gov/vuln/detail/CVE-2022-23471","https://github.com/containerd/containerd/commit/a05d175400b1145e5e6a735a6710579d181e7fb0","https://security.gentoo.org/glsa/202401-31","https://github.com/advisories/GHSA-2qjp-425j-52j9"],"source_kind":"github","identifiers":["GHSA-2qjp-425j-52j9","CVE-2022-23471"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2022-12-21T16:11:46.359Z","updated_at":"2026-10-08T08:01:12.735Z","epss_percentage":0.01109,"epss_percentile":0.6485,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0ycWpwLTQyNWotNTJqOc4AAwM4","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0ycWpwLTQyNWotNTJqOc4AAwM4","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.6.12","vulnerable_version_range":"\u003e= 1.6.0, \u003c 1.6.12"},{"first_patched_version":"1.5.16","vulnerable_version_range":"\u003c 1.5.16"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0ycWpwLTQyNWotNTJqOc4AAwM4/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01ZmZ3LWd4cHAtbXhwZs4AArZf","url":"https://github.com/advisories/GHSA-5ffw-gxpp-mxpf","title":"containerd CRI plugin: Host memory exhaustion through ExecSync","description":"### Impact\n\nA bug was found in containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the `ExecSync` API.  This can cause containerd to consume all available memory on the computer, denying service to other legitimate workloads.  Kubernetes and crictl can both be configured to use containerd's CRI implementation; `ExecSync` may be used when running probes or when executing processes via an \"exec\" facility.\n\n### Patches\n\nThis bug has been fixed in containerd 1.6.6 and 1.5.13.  Users should update to these versions to resolve the issue.\n\n### Workarounds\n\nEnsure that only trusted images and commands are used. \n\n### References\n\n* Similar fix in cri-o's CRI implementation https://github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6j\n\n### Credits\n\nThe containerd project would like to thank David Korczynski and Adam Korczynski of ADA Logics for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md) during a security audit sponsored by CNCF and facilitated by OSTIF.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-06-06T22:07:10.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.5,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf","https://github.com/containerd/containerd/commit/c1bcabb4541930f643aa36a2b38655e131346382","https://nvd.nist.gov/vuln/detail/CVE-2022-31030","https://www.debian.org/security/2022/dsa-5162","http://www.openwall.com/lists/oss-security/2022/06/07/1","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REOZCUAPCA7NFDWYBDYX6EYXWLHABKBO/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSIGDBHAB3I75JBJNGWEPBTJPS2FOVHD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/REOZCUAPCA7NFDWYBDYX6EYXWLHABKBO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSIGDBHAB3I75JBJNGWEPBTJPS2FOVHD/","https://security.gentoo.org/glsa/202401-31","https://github.com/advisories/GHSA-5ffw-gxpp-mxpf"],"source_kind":"github","identifiers":["GHSA-5ffw-gxpp-mxpf","CVE-2022-31030"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2022-12-21T16:12:20.894Z","updated_at":"2026-09-30T09:17:14.119Z","epss_percentage":0.00381,"epss_percentile":0.29504,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01ZmZ3LWd4cHAtbXhwZs4AArZf","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01ZmZ3LWd4cHAtbXhwZs4AArZf","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.6.6","vulnerable_version_range":"\u003e= 1.6.0, \u003c 1.6.6"},{"first_patched_version":"1.5.13","vulnerable_version_range":"\u003c 1.5.13"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01ZmZ3LWd4cHAtbXhwZs4AArZf/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jcnAyLXFycjUtOHBxN80vuQ","url":"https://github.com/advisories/GHSA-crp2-qrr5-8pq7","title":"containerd CRI plugin: Insecure handling of image volumes","description":"### Impact\n\nA bug was found in containerd where containers launched through containerd’s CRI implementation with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host.  This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information.  Kubernetes and crictl can both be configured to use containerd’s CRI implementation.\n\n### Patches\n\nThis bug has been fixed in containerd 1.6.1, 1.5.10 and 1.4.13.  Users should update to these versions to resolve the issue.\n\n### Workarounds\n\nEnsure that only trusted images are used.\n\n### Credits\n\nThe containerd project would like to thank Felix Wilhelm of Google Project Zero for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-03-02T21:33:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7","https://nvd.nist.gov/vuln/detail/CVE-2022-23648","https://github.com/containerd/containerd/commit/10f428dac7cec44c864e1b830a4623af27a9fc70","https://github.com/containerd/containerd/releases/tag/v1.4.13","https://github.com/containerd/containerd/releases/tag/v1.5.10","https://github.com/containerd/containerd/releases/tag/v1.6.1","https://www.debian.org/security/2022/dsa-5091","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AUDQUQBZJGBWJPMRVB6QCCCRF7O3O4PA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HFTS2EF3S7HNYSNZSEJZIJHPRU7OPUV3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCCARJ6FU4MWBTXHZNMS7NELPDBIX2VO/","http://packetstormsecurity.com/files/166421/containerd-Image-Volume-Insecure-Handling.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUDQUQBZJGBWJPMRVB6QCCCRF7O3O4PA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFTS2EF3S7HNYSNZSEJZIJHPRU7OPUV3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OCCARJ6FU4MWBTXHZNMS7NELPDBIX2VO/","https://security.gentoo.org/glsa/202401-31","https://github.com/advisories/GHSA-crp2-qrr5-8pq7"],"source_kind":"github","identifiers":["GHSA-crp2-qrr5-8pq7","CVE-2022-23648"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2022-12-21T16:12:34.440Z","updated_at":"2026-09-30T09:17:35.137Z","epss_percentage":0.27392,"epss_percentile":0.97811,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jcnAyLXFycjUtOHBxN80vuQ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jcnAyLXFycjUtOHBxN80vuQ","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.6.1","vulnerable_version_range":"\u003e= 1.6.0, \u003c 1.6.1"},{"first_patched_version":"1.5.10","vulnerable_version_range":"\u003e= 1.5.0, \u003c 1.5.10"},{"first_patched_version":"1.4.13","vulnerable_version_range":"\u003c 1.4.13"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jcnAyLXFycjUtOHBxN80vuQ/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc0MnctODlnYy04bTlj","url":"https://github.com/advisories/GHSA-742w-89gc-8m9c","title":"containerd v1.2.x can be coerced into leaking credentials during image pull","description":"## Impact\n\nIf a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific image layer (otherwise known as a “foreign layer”), the default containerd resolver will follow that URL to attempt to download it. In v1.2.x but not 1.3.0 or later, the default containerd resolver will provide its authentication credentials if the server where the URL is located presents an HTTP 401 status code along with registry-specific HTTP headers.\n\nIf an attacker publishes a public image with a manifest that directs one of the layers to be fetched from a web server they control and they trick a user or system into pulling the image, they can obtain the credentials used for pulling that image. In some cases, this may be the user's username and password for the registry. In other cases, this may be the credentials attached to the cloud virtual instance which can grant access to other cloud resources in the account.\n\nThe default containerd resolver is used by the cri-containerd plugin (which can be used by Kubernetes), the ctr development tool, and other client programs that have explicitly linked against it.\n\nThis vulnerability has been rated by the containerd maintainers as medium, with a CVSS score of 6.1 and a vector string of CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N.\n\n## Patches\n\nThis vulnerability has been fixed in containerd 1.2.14.  containerd 1.3 and later are not affected.\n\n## Workarounds\n\nIf you are using containerd 1.3 or later, you are not affected.  If you are using cri-containerd in the 1.2 series or prior, you should ensure you only pull images from trusted sources.  Other container runtimes built on top of containerd but not using the default resolver (such as Docker) are not affected.\n\n## Credits\n\nThe containerd maintainers would like to thank Brad Geesaman, Josh Larsen, Ian Coldwater, Duffie Cooley, and Rory McCune for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/master/SECURITY.md).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-02-11T23:27:39.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-742w-89gc-8m9c","https://nvd.nist.gov/vuln/detail/CVE-2020-15157","https://github.com/containerd/containerd/commit/1ead8d9deb3b175bf40413b8c47b3d19c2262726","https://darkbit.io/blog/cve-2020-15157-containerdrip","https://github.com/containerd/containerd/releases/tag/v1.2.14","https://usn.ubuntu.com/4589-1/","https://usn.ubuntu.com/4589-2/","https://www.debian.org/security/2021/dsa-4865","https://github.com/advisories/GHSA-742w-89gc-8m9c"],"source_kind":"github","identifiers":["GHSA-742w-89gc-8m9c","CVE-2020-15157"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2022-12-21T16:13:00.878Z","updated_at":"2026-09-30T09:18:28.224Z","epss_percentage":0.02299,"epss_percentile":0.82534,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc0MnctODlnYy04bTlj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc0MnctODlnYy04bTlj","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.2.14","vulnerable_version_range":"\u003c 1.2.14"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc0MnctODlnYy04bTlj/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tdmZmLWgzY2otd2o5Y80g4w","url":"https://github.com/advisories/GHSA-mvff-h3cj-wj9c","title":"Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux","description":"### Impact\n\nContainers launched through containerd’s CRI implementation on Linux systems which use the SELinux security module and containerd versions since v1.5.0 can cause arbitrary files and directories on the host to be relabeled to match the container process label through the use of specially-configured bind mounts in a hostPath volume. This relabeling elevates permissions for the container, granting full read/write access over the affected files and directories. Kubernetes and crictl can both be configured to use containerd’s CRI implementation.\n\nIf you are not using containerd’s CRI implementation (through one of the mechanisms described above), you are not affected by this issue.\n\n### Patches\n\nThis bug has been fixed in containerd 1.5.9.  Because file labels persist independently of containerd, users should both update to these versions as soon as they are released and validate that all files on their host are correctly labeled.\n\n### Workarounds\n\nEnsure that no sensitive files or directories are used as a hostPath volume source location.  Policy enforcement mechanisms such a Kubernetes Pod Security Policy [AllowedHostPaths](https://kubernetes.io/docs/concepts/policy/pod-security-policy/#volumes-and-file-systems) may be specified to limit the files and directories that can be bind-mounted to containers.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-01-06T17:36:59.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.0,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","references":["https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c","https://github.com/containerd/containerd/issues/6194","https://github.com/containerd/containerd/commit/a731039238c62be081eb8c31525b988415745eea","https://github.com/dweomer/containerd/commit/f7f08f0e34fb97392b0d382e58916d6865100299","https://nvd.nist.gov/vuln/detail/CVE-2021-43816","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD5GH7NMK5VJMA2Y5CYB5O5GTPYMWMLX/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPDIZMI7ZPERSZE2XO265UCK5IWM7CID/","https://github.com/advisories/GHSA-mvff-h3cj-wj9c"],"source_kind":"github","identifiers":["GHSA-mvff-h3cj-wj9c","CVE-2021-43816"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2022-12-21T16:12:39.792Z","updated_at":"2026-10-16T23:23:00.854Z","epss_percentage":0.01682,"epss_percentile":0.76508,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tdmZmLWgzY2otd2o5Y80g4w","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tdmZmLWgzY2otd2o5Y80g4w","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.5.9","vulnerable_version_range":"\u003e= 1.5.0, \u003c 1.5.9"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tdmZmLWgzY2otd2o5Y80g4w/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01ajV3LWc2NjUtNW0zNc0XXw","url":"https://github.com/advisories/GHSA-5j5w-g665-5m35","title":"Ambiguous OCI manifest parsing","description":"### Impact\n\nIn the OCI Distribution Specification version 1.0.0 and prior and in the OCI Image Specification version 1.0.1 and prior, manifest and index documents are ambiguous without an accompanying Content-Type HTTP header.  Versions of containerd prior to 1.4.12 and 1.5.8 treat the Content-Type header as trusted and deserialize the document according to that header.  If the Content-Type header changed between pulls of the same ambiguous document (with the same digest), the document may be interpreted differently, meaning that the digest alone is insufficient to unambiguously identify the content of the image.\n\n### Patches\n\nThis issue has been fixed in containerd 1.4.12 and 1.5.8.  Image pulls for manifests that contain a “manifests” field or indices which contain a “layers” field are rejected.\n\n### Workarounds\n\nEnsure you only pull images from trusted sources.\n\n### References\n\nhttps://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m\nhttps://github.com/opencontainers/image-spec/security/advisories/GHSA-77vh-xpmg-72qh\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","origin":"UNSPECIFIED","severity":"LOW","published_at":"2021-11-18T16:08:58.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":3.0,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35","https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m","https://github.com/opencontainers/image-spec/security/advisories/GHSA-77vh-xpmg-72qh","https://github.com/containerd/containerd/releases/tag/v1.4.12","https://github.com/containerd/containerd/releases/tag/v1.5.8","https://github.com/containerd/containerd/commit/26c76a3014e71af5ad2f396ec76e0e0ecc8e25a3","https://github.com/containerd/containerd/commit/db00065a969a983ceb0a409833f93f705f284ea4","https://github.com/advisories/GHSA-5j5w-g665-5m35"],"source_kind":"github","identifiers":["GHSA-5j5w-g665-5m35"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2022-12-21T16:12:42.238Z","updated_at":"2026-09-30T09:17:55.360Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01ajV3LWc2NjUtNW0zNc0XXw","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01ajV3LWc2NjUtNW0zNc0XXw","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.5.8","vulnerable_version_range":"\u003e= 1.5.0, \u003c 1.5.8"},{"first_patched_version":"1.4.12","vulnerable_version_range":"\u003c 1.4.12"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01ajV3LWc2NjUtNW0zNc0XXw/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jMmgzLTZteHctN212cc0WHg","url":"https://github.com/advisories/GHSA-c2h3-6mxw-7mvq","title":"Insufficiently restricted permissions on plugin directories","description":"### Impact\nA bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files.\n\n### Patches\nThis vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability.\n\n### Workarounds\nLimit access to the host to trusted users. Update directory permission on container bundles directories. \n\n### For more information\nIf you have any questions or comments about this advisory: \n* Open an issue in [github.com/containerd/containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-10-04T20:14:47.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.9,"cvss_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","references":["https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq","https://nvd.nist.gov/vuln/detail/CVE-2021-41103","https://github.com/containerd/containerd/commit/5b46e404f6b9f661a205e28d59c982d3634148f8","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/","https://www.debian.org/security/2021/dsa-5002","https://github.com/containerd/containerd/releases/tag/v1.4.11","https://github.com/containerd/containerd/releases/tag/v1.5.7","https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/","https://security.gentoo.org/glsa/202401-31","https://github.com/advisories/GHSA-c2h3-6mxw-7mvq"],"source_kind":"github","identifiers":["GHSA-c2h3-6mxw-7mvq","CVE-2021-41103"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2022-12-21T16:12:45.661Z","updated_at":"2026-10-16T23:23:19.492Z","epss_percentage":0.00518,"epss_percentile":0.42653,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jMmgzLTZteHctN212cc0WHg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jMmgzLTZteHctN212cc0WHg","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.5.7","vulnerable_version_range":"\u003e= 1.5.0, \u003c 1.5.7"},{"first_patched_version":"1.4.11","vulnerable_version_range":"\u003c 1.4.11"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jMmgzLTZteHctN212cc0WHg/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM3MnAtOXhtai1yeDN3","url":"https://github.com/advisories/GHSA-c72p-9xmj-rx3w","title":"Archive package allows chmod of file outside of unpack target directory","description":"## Impact\n\nA bug was found in containerd where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem.  Changes to file permissions can deny access to the expected owner of the file, widen access to others, or set extended bits like setuid, setgid, and sticky.  This bug does not directly allow files to be read, modified, or executed without an additional cooperating process.\n\n## Patches\n\nThis bug has been fixed in containerd 1.5.4 and 1.4.8.  Users should update to these versions as soon as they are released.  Running containers do not need to be restarted.\n\n## Workarounds\n\nEnsure you only pull images from trusted sources.\n\nLinux security modules (LSMs) like SELinux and AppArmor can limit the files potentially affected by this bug through policies and profiles that prevent containerd from interacting with unexpected files.\n\n## For more information\n\nIf you have any questions or comments about this advisory:\n\n* [Open an issue](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at security@containerd.io if you think you’ve found a security bug.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-07-26T21:17:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.0,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","references":["https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w","https://nvd.nist.gov/vuln/detail/CVE-2021-32760","https://github.com/containerd/containerd/releases/tag/v1.4.8","https://github.com/containerd/containerd/releases/tag/v1.5.4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDMNDPJJTP3J5GOEDB66F6MGXUTRG3Y3/","https://github.com/containerd/containerd/commit/22e9a70c71eff6507be71955947a611f2ed91e6c","https://github.com/containerd/containerd/commit/7ad08c69e09ee4930a48dbf2aab3cd612458617f","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDMNDPJJTP3J5GOEDB66F6MGXUTRG3Y3/","https://security.gentoo.org/glsa/202401-31","https://github.com/advisories/GHSA-c72p-9xmj-rx3w"],"source_kind":"github","identifiers":["GHSA-c72p-9xmj-rx3w","CVE-2021-32760"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2022-12-21T16:12:57.565Z","updated_at":"2026-09-30T09:18:21.052Z","epss_percentage":0.01595,"epss_percentile":0.74645,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM3MnAtOXhtai1yeDN3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM3MnAtOXhtai1yeDN3","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.5.4","vulnerable_version_range":"\u003e= 1.5.0, \u003c 1.5.4"},{"first_patched_version":"1.4.8","vulnerable_version_range":"\u003c 1.4.8"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM3MnAtOXhtai1yeDN3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM2eHctZng3OC1jNXI0","url":"https://github.com/advisories/GHSA-36xw-fx78-c5r4","title":"containerd-shim API Exposed to Host Network Containers","description":"## Impact\n\nAccess controls for the shim’s API socket verified that the connecting process had an effective UID of 0, but did not otherwise restrict access to the abstract Unix domain socket. This would allow malicious containers running in the same network namespace as the shim, with an effective UID of 0 but otherwise reduced privileges, to cause new processes to be run with elevated privileges.\n\n### Specific Go Packages Affected\ngithub.com/containerd/containerd/cmd\n\n## Patches\n\nThis vulnerability has been fixed in containerd 1.3.9 and 1.4.3.  Users should update to these versions as soon as they are released.  It should be noted that containers started with an old version of containerd-shim should be stopped and restarted, as running containers will continue to be vulnerable even after an upgrade.\n\n## Workarounds\n\nIf you are not providing the ability for untrusted users to start containers in the same network namespace as the shim (typically the \"host\" network namespace, for example with `docker run --net=host` or `hostNetwork: true` in a Kubernetes pod) and run with an effective UID of 0, you are not vulnerable to this issue.\n\nIf you are running containers with a vulnerable configuration, you can deny access to all abstract sockets with AppArmor by adding a line similar to `deny unix addr=@**,` to your policy.\n\nIt is best practice to run containers with a reduced set of privileges, with a non-zero UID, and with isolated namespaces.  The containerd maintainers strongly advise against sharing namespaces with the host. Reducing the set of isolation mechanisms used for a container necessarily increases that container's privilege, regardless of what container runtime is used for running that container.\n\n## Credits\n\nThe containerd maintainers would like to thank Jeff Dileo of NCC Group for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/master/SECURITY.md) and for reviewing the patch.\n\n## For more information\n\nIf you have any questions or comments about this advisory:\n\n\n* [Open an issue](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at security@containerd.io if you think you’ve found a security bug.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-05-24T17:00:22.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.2,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","references":["https://github.com/containerd/containerd/security/advisories/GHSA-36xw-fx78-c5r4","https://nvd.nist.gov/vuln/detail/CVE-2020-15257","https://github.com/containerd/containerd/commit/4a4bb851f5da563ff6e68a83dc837c7699c469ad","https://github.com/containerd/containerd/releases/tag/v1.4.3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNKXLOLZWO5FMAPX63ZL7JNKTNNT5NQD/","https://research.nccgroup.com/2020/12/10/abstract-shimmer-cve-2020-15257-host-networking-is-root-equivalent-again/","https://www.debian.org/security/2021/dsa-4865","https://security.gentoo.org/glsa/202105-33","https://github.com/advisories/GHSA-36xw-fx78-c5r4"],"source_kind":"github","identifiers":["GHSA-36xw-fx78-c5r4","CVE-2020-15257"],"repository_url":"https://github.com/containerd/containerd","blast_radius":0.0,"created_at":"2022-12-21T16:13:01.064Z","updated_at":"2026-10-03T14:11:26.607Z","epss_percentage":0.03236,"epss_percentile":0.87526,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM2eHctZng3OC1jNXI0","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM2eHctZng3OC1jNXI0","packages":[{"ecosystem":"go","package_name":"github.com/containerd/containerd","versions":[{"first_patched_version":"1.4.3","vulnerable_version_range":"\u003e= 1.4.0, \u003c 1.4.3"},{"first_patched_version":"1.3.9","vulnerable_version_range":"\u003c 1.3.9"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fcontainerd"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM2eHctZng3OC1jNXI0/related_packages","related_advisories":[]}]