ROS-20230322-02

The Containerd container execution environment vulnerability is related to a flaw whereby additional
groups are not properly configured within the container, when an attacker has direct access to the container
and manipulates its optional group access, it can use optional group
access to bypass the restrictions of the primary group. Exploitation of the vulnerability could allow an intruder to
gain access to sensitive information or be able to execute code in that container.

The Containerd container execution environment vulnerability is related to the lack of a limit on the number of
bytes read for specific files when importing OCI images. Exploitation of the vulnerability could
allow an attacker to cause a denial of service.