Linux Distros Unpatched Vulnerability : CVE-2023-25173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up...

CVE-2024-28180 affecting package moby-containerd-cc for versions less than 1.7.7-6

CVE-2024-28180 affecting package moby-containerd-cc for versions less than 1.7.7-6. A patched version of the package is available...

CVE-2023-45288 affecting package containerd for versions less than 1.7.13-6

CVE-2023-45288 affecting package containerd for versions less than 1.7.13-6. A patched version of the package is available...

CVE-2023-45288 affecting package moby-containerd-cc for versions less than 1.7.7-6

CVE-2023-45288 affecting package moby-containerd-cc for versions less than 1.7.7-6. A patched version of the package is available...

CVE-2024-28180 affecting package containerd for versions less than 1.7.13-6

CVE-2024-28180 affecting package containerd for versions less than 1.7.13-6. A patched version of the package is available...

openSUSE Security Advisory (SUSE-SU-2024:2108-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: grafana-mimir, skopeo, kube-rbac-proxy, rook, step, openbao, frp, ko, ksops, melange, flux-source-controller, traefik, distribution, spire-controller-manager, step-issuer, gatus, minio, vault-benchmark, buildah, zarf, spiffe-helper, hydra, apko, goreleaser, tflint,...

AZL-57120 CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-9

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: grafana-mimir, skopeo, kube-rbac-proxy, rook, step, openbao, frp, ko, ksops, melange, flux-source-controller, traefik, distribution, spire-controller-manager, step-issuer, gatus, minio, vault-benchmark, buildah, zarf, spiffe-helper, hydra, apko, goreleaser, tflint,...

CVE-2024-28180 affecting package moby-containerd-cc for versions less than 1.7.7-9

CVE-2024-28180 affecting package moby-containerd-cc for versions less than 1.7.7-9. A patched version of the package is available...

Docker implementation in Brocade SANnav is missing Audit Rules. (CVE-2024-2240)

Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authenticated attacker to execute various attacks. Details. 'dockerd' is the Docker daemon/process that manages containers through the use of different binaries for the daemon and...

CVE-2024-28180 affecting package moby-containerd for versions less than 1.6.26-9

CVE-2024-28180 affecting package moby-containerd for versions less than 1.6.26-9. A patched version of the package is available...

Azure Linux 3.0 Security Update: cert-manager / containerized-data-importer / cri-o / dcos-cli / keda / kubernetes (CVE-2024-28180)

The version of cert-manager / containerized-data-importer / cri-o / dcos-cli / keda / kubernetes installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28180 advisory. - Package jose aims to provide an...

Azure Linux 3.0 Security Update: containerd / cri-tools / docker-buildx / docker-compose / moby-containerd-cc (CVE-2023-47108)

The version of containerd / cri-tools / docker-buildx / docker-compose / moby-containerd-cc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-47108 advisory. - OpenTelemetry-Go Contrib is a collecti...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2025-835)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-835 advisory. Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that A call t...

Amazon Linux 2 : containerd (ALASDOCKER-2025-049)

The version of containerd installed on the remote host is prior to 1.7.25-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2025-049 advisory. Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization...

Amazon Linux 2 : containerd (ALASECS-2025-046)

The version of containerd installed on the remote host is prior to 1.7.25-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-046 advisory. Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization...

Important: containerd

Issue Overview: Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to...

Amazon Linux 2 : containerd (ALASNITRO-ENCLAVES-2025-049)

The version of containerd installed on the remote host is prior to 1.7.25-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2025-049 advisory. Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an...

Important: containerd

Issue Overview: Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to...