55 matches found
Medium: containerd
Issue Overview: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container...
OESA-2025-1348 containerd security update
containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...
Fedora 41 : containerd (2025-92362585e0)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-92362585e0 advisory. Update to v1.7.27 for F41 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
Ubuntu: Security Advisory (USN-7374-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OESA-2025-1325 containerd security update
containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...
CVE-2024-40635 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, syft, envoy-gateway, opa-envoy, grype, helm-push, newrelic-infrastructure-agent, spegel, ctop, flux-source-controller, cilium-cli, zarf, opa, wolfictl, dagger, kubescape, k8sgpt, cluster-api-helm-controller, chartmuseum, linkerd2, skaffold,...
CVE-2024-40635 vulnerabilities
Vulnerabilities for packages: chartmuseum, docker-fips, envoy-gateway, trivy, neuvector, dagger, nerdctl, xeol-fips, cluster-api-helm-controller, beats, consul-k8s-fips, fuse-overlayfs-snapshotter, kaniko-fips, rancher-fleet, trivy-fips, kargo, opa-fips, opa-fips-envoy, rancher-fleet-fips,...
CVE-2024-40635
creationtimestamp| type| source ---|---|--- 2025-03-17 21:47:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7865 2025-05-01 13:00:06+00:00| published-proof-of-concept| Telegram/Z0ari8MHZAzBUd7K9yxhwtBySsURYEVG61pidF9swyP9zTE 2025-05-04 22:18:50+00:00|...
CVE-2024-40635 containerd has an integer overflow in User ID handling
containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...
CVE-2023-40635
creationtimestamp| type| source ---|---|--- 2023-10-08 07:15:09+00:00| seen| https://t.me/cibsecurity/71784...
CVE-2023-40635
In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...
CVE-2023-40635
CVE-2023-40635 affects the linkturbo component and is caused by a missing permission check, enabling local privilege escalation with no extra execution privileges required. The vulnerability is reported across multiple sources (NVD, Red Hat, CVE lists) with a high impact (C:H, I:H, A:H; AV:L, PR:...
CVE-2022-40635
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass...
CVE-2022-40635
The CVE-2022-40635 entry describes an issue in Crafter CMS Crafter Studio titled “Improper Control of Dynamically-Managed Code Resources.” The connected advisories (e.g., GitHub GHSA-J6X3-3JQQ-M922 and OSV) reiterate that authenticated developers can execute operating system commands via a Groovy...