GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: ko-fips, kpt, k8sgpt, policy-controller, timoni, docker-credential-gcr, eksctl, trivy, skaffold, slsa-verifier, buildkitd, newrelic-infrastructure-agent, tekton-chains, goreleaser, gitsign, falcoctl, helm-fips, kubevela, pulumi, up, falco, cadvisor, k3s, bom, crane,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: ko-fips, kpt, k8sgpt, policy-controller, timoni, docker-credential-gcr, eksctl, trivy, skaffold, slsa-verifier, buildkitd, newrelic-infrastructure-agent, tekton-chains, goreleaser, gitsign, falcoctl, helm-fips, kubevela, pulumi, up, falco, cadvisor, k3s, bom, crane,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: trivy, skaffold, buildkitd, newrelic-infrastructure-agent, kubernetes, kubernetes-fips, runc, cadvisor, k3s, datadog-agent, podman, docker, ctop, datadog-agent-fips, kots, wolfictl, k3d, nerdctl, skopeo, zarf, grype, kaniko, kubescape, syft, k9s, zot...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: k9s, kubescape, nerdctl, kubernetes, datadog-agent, buildkitd, k3s, trivy, zot, skopeo, ctop, cadvisor, kaniko, kots, newrelic-infrastructure-agent, grype, zarf, wolfictl, docker, runc, podman, syft, skaffold, k3d...

TikTok: Remotely Accessible Container Advisor exposed performance metrics and resource usage

A vulnerability was found that caused cAdvisor Container Advisor to be publicly accessible through an 8080 port. We thank @tw4v3sx for reporting this to our team...

Fedora: Security Advisory for cadvisor (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: cadvisor-0.44.1-4.fc36

cAdvisor Container Advisor provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container i...

Fedora: Security Advisory for cadvisor (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: cadvisor-0.44.1-3.fc35

cAdvisor Container Advisor provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container i...

Fedora: Security Advisory for cadvisor (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: cadvisor-0.44.1-3.fc36

cAdvisor Container Advisor provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container i...

Denial Of Service (DoS) Through C Dependency

github.com/google/cadvisor is vulnerable to denial of service DoS attacks through the glibc library. The glibc library contains multiple stack-based buffer overflows allowing attackers to cause DoS conditions or possible execute arbitrary code. The vulnerability in glibc was assigned CVE-2015-754...