74 matches found
CVE-2023-25153 affecting package moby-containerd 1.6.6+azure-7
CVE-2023-25153 affecting package moby-containerd 1.6.6+azure-7. A patched version of the package is available...
CVE-2023-25173 affecting package moby-containerd 1.6.6+azure-7
CVE-2023-25173 affecting package moby-containerd 1.6.6+azure-7. A patched version of the package is available...
AZL-13673 CVE-2023-25173 affecting package moby-containerd for versions less than 1.6.18-2
containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be ab...
AZL-13674 CVE-2023-25153 affecting package moby-containerd for versions less than 1.6.18-2
containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could cause a denial of service. This bug h...
CVE-2022-23471 affecting package moby-containerd for versions less than 1.6.12-3
CVE-2022-23471 affecting package moby-containerd for versions less than 1.6.12-3. An upgraded version of the package is available that resolves this issue...
CVE-2022-23471 affecting package moby-containerd 1.6.6+azure-4
CVE-2022-23471 affecting package moby-containerd 1.6.6+azure-4. A patched version of the package is available...
AZL-11585 CVE-2022-23471 affecting package moby-containerd for versions less than 1.6.12-3
containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, f...
CVE-2022-31030 affecting package moby-containerd 1.5.9+azure-7
CVE-2022-31030 affecting package moby-containerd 1.5.9+azure-7. An upgraded version of the package is available that resolves this issue...
CVE-2022-31030 affecting package moby-containerd for versions less than 1.6.6-1
CVE-2022-31030 affecting package moby-containerd for versions less than 1.6.6-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-32760 affecting package moby-containerd for versions less than 1.4.4+azure-4
CVE-2021-32760 affecting package moby-containerd for versions less than 1.4.4+azure-4. A patched version of the package is available...
CVE-2021-41103 affecting package moby-containerd for versions less than 1.4.4+azure-4
CVE-2021-41103 affecting package moby-containerd for versions less than 1.4.4+azure-4. A patched version of the package is available...
CVE-2021-41103 affecting package moby-containerd 1.4.4+azure-6
CVE-2021-41103 affecting package moby-containerd 1.4.4+azure-6. A patched version of the package is available...
CVE-2021-32760 affecting package moby-containerd 1.4.4+azure-6
CVE-2021-32760 affecting package moby-containerd 1.4.4+azure-6. A patched version of the package is available...
CVE-2021-21334 affecting package moby-containerd 1.4.4-2
CVE-2021-21334 affecting package moby-containerd 1.4.4-2. An upgraded version of the package is available that resolves this issue...