Photon OS 5.0: Containerd PHSA-2025-5.0-0682

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0682. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-64329 affecting package moby-containerd-cc for versions less than 1.7.7-10

CVE-2025-64329 affecting package moby-containerd-cc for versions less than 1.7.7-10. A patched version of the package is available...

CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-10

CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-10. A patched version of the package is available...

TencentOS Server 4: containerd (TSSA-2025:0322)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0322 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2025-64329 affecting package moby-containerd-cc for versions less than 1.7.7-13

CVE-2025-64329 affecting package moby-containerd-cc for versions less than 1.7.7-13. A patched version of the package is available...

CVE-2024-25621 affecting package moby-containerd for versions less than 1.6.26-13

CVE-2024-25621 affecting package moby-containerd for versions less than 1.6.26-13. A patched version of the package is available...

CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-13

CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-13. A patched version of the package is available...

CVE-2025-64329 affecting package moby-containerd for versions less than 1.6.26-13

CVE-2025-64329 affecting package moby-containerd for versions less than 1.6.26-13. A patched version of the package is available...

GO-2025-4108 containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd...

GO-2025-4100 containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd...

CVE-2025-64329

A flaw was found in containerd. This vulnerability allows a user to exhaust memory on the host due to goroutine leaks via a bug in the CRI Container Runtime Interface Attach implementation...

Fedora: Security Advisory (FEDORA-2025-ffac32ead0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-25621

containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...

[SECURITY] Fedora 41 Update: containerd-1.7.29-1.fc41

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

[SECURITY] Fedora 42 Update: containerd-2.0.7-1.fc42

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

[SECURITY] Fedora 43 Update: containerd-2.1.5-1.fc43

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

Fedora 42 : containerd (2025-daa6238745)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-daa6238745 advisory. Update to v2.0.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 43 : containerd (2025-ffac32ead0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ffac32ead0 advisory. Update to release v2.1.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 41 : containerd (2025-80ed98504b)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-80ed98504b advisory. Update to v1.7.29 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

SUSE-SU-2025:21057-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2024-25621: Fixed overly broad default permission vulnerability bsc1253126. - CVE-2025-64329: Fixed goroutine leaks can lead to memory exhaustion on the host bsc1253132...