PT-2023-1887 · Unknown +7 · Kubernetes Containerd +6

🗓️ 16 Feb 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 3 Views

Containerd image import can DoS via large files; upgrade to 1.6.18+ or 1.5.18+ and use trusted image imports.

Reporter	Title	Published	Views	Family All 735
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities	20 Feb 202419:29	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-23648)	18 Mar 202218:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	13 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in containerd may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2022-31030, CVE-2022-23471)	9 Jan 202415:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console (CVE-2022-23648, CVE-2022-32149)	3 Jul 202509:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in containerd	17 May 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-31030)	24 Jun 202215:36	–	ibm

Source	Link
github	www.github.com/raesene/CVE-2022-23648-POC
github	www.github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4
github	www.github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2
wiki	www.wiki.astralinux.ru/pages/viewpage.action
advisories	www.advisories.mageia.org/MGASA-2023-0245.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-25173
bdu	www.bdu.fstec.ru/vul/2023-01489
bdu	www.bdu.fstec.ru/vul/2023-01488
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2023-25153

10 Sep 2024 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 26 - 6.8

CVSS 3.18 - 9.1

EPSS0.27392

SSVC