AZL-69973 CVE-2025-64329 affecting package moby-containerd for versions less than 1.6.26-13

🗓️ 07 Nov 2025 05:16:08Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Memory exhaustion bug in containerd attach affects moby containerd below 1.6.26-13; fixed in 1.7.29, 2.0.7, 2.1.5, 2.2.0; use an admission controller as a workaround.

Reporter	Title	Published	Views	Family All 162
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	10 Dec 202516:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability has addressed Multiple Vulnerabilities within Instana Agent container image	3 Mar 202613:53	–	ibm
IBM Security Bulletins	Security Bulletin: ELM on Hybrid Cloud vulnerabilities addressed in 1.3.0	9 Mar 202613:57	–	ibm
Tenable Nessus	Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2025-1304)	9 Dec 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : containerd, --advisory ALAS2DOCKER-2025-086 (ALASDOCKER-2025-086)	8 Dec 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : containerd, --advisory ALAS2ECS-2025-084 (ALASECS-2025-084)	8 Dec 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2025-078 (ALASNITRO-ENCLAVES-2025-078)	8 Dec 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2025-64329)	22 Jan 202600:00	–	nessus
Tenable Nessus	Debian dla-4467 : containerd - security update	5 Feb 202600:00	–	nessus
Tenable Nessus	Debian dsa-6067 : containerd - security update	2 Dec 202500:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-64329

21 Apr 2026 04:36Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.5

CVSS 46.9

EPSS0.00007

SSVC