PT-2022-6020 · Containerd +7 · Kubernetes Containerd +6

🗓️ 07 Dec 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 13 Views

Memory leak in containerd stream server when a TTY is used and launch fails; upgrade to 1.6.12 or 1.5.16.

Reporter	Title	Published	Views	Family All 2625
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities	20 Feb 202419:29	–	ibm
IBM Security Bulletins	Security Bulletin: Go Vulnerabilities affect IBM IBM Database Operator for FoundationDB (CVE-2022-27191, CVE-2021-43565)	25 Feb 202621:31	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2022-27664, CVE-2022-21698, CVE-2021-43565 and CVE-2022-27191 may affect IBM CICS TX Standard	29 Mar 202319:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-23648)	18 Mar 202218:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	13 Mar 202503:39	–	ibm

Source	Link
github	www.github.com/raesene/CVE-2022-23648-POC
github	www.github.com/containerd/containerd/commit/a05d175400b1145e5e6a735a6710579d181e7fb0
wiki	www.wiki.astralinux.ru/pages/viewpage.action
advisories	www.advisories.mageia.org/MGASA-2023-0245.html
bdu	www.bdu.fstec.ru/vul/2023-01489
bdu	www.bdu.fstec.ru/vul/2023-01488
errata	www.errata.altlinux.org/ALT-PU-2023-1489
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/CVE-2022-31030
osv	www.osv.dev/vulnerability/GHSA-2qjp-425j-52j9

10 Sep 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 26 - 6.8

CVSS 3.18 - 9.1

EPSS0.27392

SSVC