GO-2022-0360 Ambiguous OCI manifest parsing in github.com/containerd/containerd

Ambiguous OCI manifest parsing in github.com/containerd/containerd...

GO-2022-0344 containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd...

GO-2022-0278 Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

Unprivileged pod using hostPath can side-step active LSM when it is SELinux in github.com/containerd/containerd...

Amazon Linux 2 : containerd, --advisory ALAS2ECS-2024-040 (ALASECS-2024-040)

The version of containerd installed on the remote host is prior to 1.7.20-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2024-040 advisory. The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This...

Amazon Linux 2 : containerd (ALASDOCKER-2024-041)

The version of containerd installed on the remote host is prior to 1.7.20-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2024-041 advisory. 2024-08-27: CVE-2024-24790 was added to this advisory. 2024-08-14: CVE-2023-47108 was removed from this advisory...

Amazon Linux 2 : containerd (ALASNITRO-ENCLAVES-2024-042)

The version of containerd installed on the remote host is prior to 1.7.20-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2024-042 advisory. 2024-08-27: CVE-2024-24790 was added to this advisory. 2024-08-09: CVE-2023-47108 was removed from this...

Medium: containerd

Issue Overview: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

Medium: containerd

Issue Overview: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

GLSA-202408-01 : containerd: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202408-01 containerd: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in containerd. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

Medium: containerd

Issue Overview: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

Medium: containerd

Issue Overview: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

Medium: containerd

Issue Overview: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

containerd: Multiple Vulnerabilities

Background containerd is a daemon with an API and a command line client, to manage containers on one machine. It uses runC to run containers according to the OCI specification. Description Multiple vulnerabilities have been discovered in containerd. Please review the CVE identifiers referenced...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2024-697)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-697 advisory. 2024-08-28: CVE-2024-24790 was added to this advisory. 2024-08-09: CVE-2023-47108 was removed from this advisory. 2024-08-09: The severity of this advisory has been changed from Important to...

Photon OS 3.0: Containerd PHSA-2023-3.0-0538

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Containerd PHSA-2023-3.0-0545

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0545. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Containerd PHSA-2022-3.0-0402

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0402. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Containerd PHSA-2022-3.0-0367

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0367. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Containerd PHSA-2022-4.0-0159

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0159. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Containerd PHSA-2022-4.0-0195

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0195. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...