CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, crossplane, buildkitd, kubescape, tkn, conftest, cadvisor, grype, trivy, cilium-cli, ctop, loki, dagger, syft, prometheus, docker-compose, spire-server-fips, spire-server, kaniko, up, aactl, ko, kargo, conftest-fips, melange, zot, wolfictl, buf...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: cadvisor-fips, crossplane, buildkitd, kubescape, tkn, conftest, cadvisor, grype, trivy, cilium-cli, ctop, loki, dagger, syft, prometheus, docker-compose, spire-server-fips, spire-server, kaniko, up, aactl, ko, kargo, conftest-fips, melange, zot, wolfictl, buf...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: cadvisor-fips, bom, helm-operator, docker-credential-gcr, buildkitd, crane, kubescape, k3s, ko-fips, rancher-machine, flux, nerdctl, flux-helm-controller, policy-controller, helm-operator-fips, cadvisor, tekton-chains, trivy, kubevela, helm, ctop, loki, dagger, eksct...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, bom, helm-operator, docker-credential-gcr, buildkitd, crane, kubescape, k3s, ko-fips, rancher-machine, flux, nerdctl, flux-helm-controller, policy-controller, helm-operator-fips, cadvisor, tekton-chains, trivy, kubevela, helm, ctop, loki, dagger, eksct...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: kubernetes, buildkitd, kubescape, k3s, nerdctl, cadvisor, grype, trivy, ctop, podman, runc, skaffold, syft, docker, kaniko, skopeo, zarf, newrelic-infrastructure-agent, zot, wolfictl, k9s, k3d, kots...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: zot, skopeo, k9s, cadvisor, kaniko, ctop, grype, kubernetes, kots, nerdctl, k3d, trivy, k3s, docker, wolfictl, zarf, syft, buildkitd, skaffold, newrelic-infrastructure-agent, runc, podman, kubescape...

TikTok: Remotely Accessible Container Advisor exposed performance metrics and resource usage

A vulnerability was found that caused cAdvisor Container Advisor to be publicly accessible through an 8080 port. We thank @tw4v3sx for reporting this to our team...

Fedora: Security Advisory for cadvisor (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: cadvisor-0.44.1-4.fc36

cAdvisor Container Advisor provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container i...

Fedora: Security Advisory for cadvisor (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: cadvisor-0.44.1-3.fc35

cAdvisor Container Advisor provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container i...

Fedora: Security Advisory for cadvisor (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: cadvisor-0.44.1-3.fc36

cAdvisor Container Advisor provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container i...

Denial Of Service (DoS) Through C Dependency

github.com/google/cadvisor is vulnerable to denial of service DoS attacks through the glibc library. The glibc library contains multiple stack-based buffer overflows allowing attackers to cause DoS conditions or possible execute arbitrary code. The vulnerability in glibc was assigned CVE-2015-754...