Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
added 2026/07/02 12:47 p.m.9 views

CVE-2026-47262

A flaw was found in containerd, an open-source container runtime. A remote attacker could exploit this vulnerability by providing a maliciously crafted image. When a container is created from this image, it leads to uncontrolled resource consumption and memory exhaustion, causing the containerd...

6.5CVSS5.8AI score0.00317EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/02 12:22 p.m.8 views

CVE-2026-46680

A flaw was found in containerd, an open-source container runtime. Containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username. This vulnerability allows a crafted container image to bypass the Kubernetes runAsNonRoot restrictio...

7.8CVSS5.7AI score0.00221EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2026/06/25 5:48 a.m.3 views

github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing

A flaw was found in containerd, an open-source container runtime. A remote attacker could exploit this vulnerability by providing a maliciously crafted image. When a container is created from this image, it leads to uncontrolled resource consumption and memory exhaustion, causing the containerd...

5.5CVSS6AI score0.00317EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-24778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by...

7.5CVSS6.8AI score0.02676EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2020/12/01 9:0 a.m.48 views

CVE-2020-15257

A flaw was found in containerd. Access controls for the shim's API socket verified that a connecting process had an effective UID of 0, but otherwise did not restrict access to the abstract Unix domain socket. This could allow malicious containers running in the same network namespace as the shim...

8.8CVSS5.6AI score0.03236EPSS
SaveExploits4References3
Rows per page
Query Builder