Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/containerd/containerd

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/containerd/containerd in go

Moderate
about 1 month ago

containerd CRI server: Host memory exhaustion through Attach goroutine leak GSA_kwCzR0hTQS1tNmhxLXAyNXAtZmZyMs4ABOS-

go github.com/containerd/containerd/v2, github.com/containerd/containerd
High
about 1 month ago

containerd affected by a local privilege escalation via wide permissions on CRI directory GSA_kwCzR0hTQS1wd2hjLXJwcTktNGM4d84ABOP1

go github.com/containerd/containerd/v2, github.com/containerd/containerd
Moderate
9 months ago

containerd has an integer overflow in User ID handling GSA_kwCzR0hTQS0yNjVyLWhmeGctZmhtZ84ABFj6

go github.com/containerd/containerd, github.com/containerd/containerd/v2
Low
over 1 year ago

containerd started with non-empty inheritable Linux process capabilities GSA_kwCzR0hTQS1jOWNwLTljNzUtOXY4Y84AA8Eg

go github.com/containerd/containerd
Moderate
almost 2 years ago

containerd environment variable leak GSA_kwCzR0hTQS02ZzJxLXc1ajMtZndoNM4AA4-2

go github.com/containerd/containerd
Moderate
almost 2 years ago

containerd allows RAPL to be accessible to a container GSA_kwCzR0hTQS03d3c1LTR3cWMtbTkyY84AA36e

go github.com/containerd/containerd
Moderate
almost 3 years ago

OCI image importer memory exhaustion in github.com/containerd/containerd GSA_kwCzR0hTQS0yNTl3LThoZjYtNTljMs4AAxql

go github.com/containerd/containerd
Moderate
almost 3 years ago

Supplementary groups are not set up properly in github.com/containerd/containerd GSA_kwCzR0hTQS1obWZ4LTNwY3gtNjUzcM4AAxqj

go github.com/containerd/containerd
Moderate
almost 3 years ago

containerd CRI stream server vulnerable to host memory exhaustion via terminal GSA_kwCzR0hTQS0ycWpwLTQyNWotNTJqOc4AAwM4

go github.com/containerd/containerd
Moderate
over 3 years ago

containerd CRI plugin: Host memory exhaustion through ExecSync GSA_kwCzR0hTQS01ZmZ3LWd4cHAtbXhwZs4AArZf

go github.com/containerd/containerd
High
almost 4 years ago

containerd CRI plugin: Insecure handling of image volumes GSA_kwCzR0hTQS1jcnAyLXFycjUtOHBxN80vuQ

go github.com/containerd/containerd
Moderate
almost 4 years ago

containerd v1.2.x can be coerced into leaking credentials during image pull MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc0MnctODlnYy04bTlj

go github.com/containerd/containerd
High
almost 4 years ago

Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux GSA_kwCzR0hTQS1tdmZmLWgzY2otd2o5Y80g4w

go github.com/containerd/containerd
Low
about 4 years ago

Ambiguous OCI manifest parsing GSA_kwCzR0hTQS01ajV3LWc2NjUtNW0zNc0XXw

go github.com/containerd/containerd
Moderate
about 4 years ago

Insufficiently restricted permissions on plugin directories GSA_kwCzR0hTQS1jMmgzLTZteHctN212cc0WHg

go github.com/containerd/containerd
Moderate
over 4 years ago

Archive package allows chmod of file outside of unpack target directory MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM3MnAtOXhtai1yeDN3

go github.com/containerd/containerd
Moderate
over 4 years ago

containerd-shim API Exposed to Host Network Containers MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM2eHctZng3OC1jNXI0

go github.com/containerd/containerd

Filter by Severity

Moderate 12 High 3 Low 2