Azure Linux 3.0 Security Update: kata-containers (CVE-2025-4432)

The version of kata-containers installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4432 advisory. - A flaw was found in Rust's Ring package. A panic May be triggered when overflow checking is enabled...

EUVD-2020-22052

Malware in sbrugna...

EUVD-2020-19675

Malware in sbrugna...

EUVD-2020-22051

Malware in sbrugna...

EUVD-2020-21305

Malware in sbrugna...

EUVD-2025-30931

Malicious code in bioql PyPI...

EUVD-2022-0858

Malicious code in bioql PyPI...

EUVD-2022-0908

Malicious code in bioql PyPI...

Kata Containers coco-tdx malicious host can circumvent initdata verification

...

CVE-2025-58354

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In Kata Containers versions from 3.20.0 and before, a malicious host can circumvent initdata verification. On TDX systems running confidential guests, ...

CVE-2025-58354 Kata Containers coco-tdx malicious host can circumvent initdata verification

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In Kata Containers versions from 3.20.0 and before, a malicious host can circumvent initdata verification. On TDX systems running confidential guests, ...

CVE-2025-58354 Kata Containers coco-tdx malicious host can circumvent initdata verification

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In Kata Containers versions from 3.20.0 and before, a malicious host can circumvent initdata verification. On TDX systems running confidential guests, ...

CVE-2025-58354

Kata Containers prior to 3.21.0 are affected. On TDX systems with confidential guests, a malicious host can bypass initdata verification, allowing the attacker to launch arbitrary workloads while maintaining valid trustee attestation to impersonate benign workloads. The issue has been fixed in Ka...

CVE-2025-58354 Kata Containers coco-tdx malicious host can circumvent initdata verification

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In Kata Containers versions from 3.20.0 and before, a malicious host can circumvent initdata verification. On TDX systems running confidential guests, ...

Kata Containers 代码问题漏洞

Kata Containers is an open source lightweight virtual machine builder from the Kata Containers community. A code issue vulnerability exists in Kata Containers 3.20.0 and prior versions, which stems from a malicious host that can bypass initdata authentication, potentially allowing an attacker to...

PT-2025-39220

Name of the Vulnerable Software and Affected Versions Kata Containers versions prior to 3.21.0 Description Kata Containers is an open source project focused on lightweight Virtual Machines that function like containers. In versions prior to 3.21.0, a malicious host can bypass initdata verificatio...

CVE-2025-53605 affecting package kata-containers for versions less than 3.19.1.kata2-1

CVE-2025-53605 affecting package kata-containers for versions less than 3.19.1.kata2-1. An upgraded version of the package is available that resolves this issue...

Important: Red Hat Security Advisory: Red Hat OpenShift sandboxed containers release

Release of Red Hat OpenShift sandboxed containers. Red Hat OpenShift sandboxed containers, based on the Kata Containers project...

AZL-73211 CVE-2025-58160 affecting package kata-containers 3.19.1.kata2-6

tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into...

CVE-2025-4574 affecting package kata-containers for versions less than 3.18.0.kata0-1

CVE-2025-4574 affecting package kata-containers for versions less than 3.18.0.kata0-1. An upgraded version of the package is available that resolves this issue...