CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-5

CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-5. A patched version of the package is available...

CVE-2024-24786 affecting package containerd for versions less than 1.7.13-5

CVE-2024-24786 affecting package containerd for versions less than 1.7.13-5. A patched version of the package is available...

Fedora 37 : containerd / golang-github-containerd-cgroups / moby-engine (2022-7e327a20be)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-7e327a20be advisory. golang-github-containerd-cgroups Fix bodhi bug of making epoch version obsolete containerd Update to 1.6.14 rhbz2154183 Tenable has extracted the...

Fedora 37 : golang-github-containerd-imgcrypt (2022-cfe50b5ebb)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-cfe50b5ebb advisory. Automatic update for golang-github-containerd-imgcrypt-1.1.4-1.fc37. Changelog Sat Apr 2 2022 Maxwell G 1.1.4-1 - Update to 1.1.4 rhbz2068719...

Fedora 36 : containerd (2022-6f630b1ba7)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6f630b1ba7 advisory. Automatic update for containerd-1.5.9-1.fc36. Changelog Mon Jan 31 2022 Maxwell G - 1.5.9-1 - Update to 1.5.9. Fixes FTBFS. Closes rhbz2045277. -...

Fedora 37 : cadvisor / containerd / golang-github-cloudflare-redoctober / etc (2022-cd92e4cc43)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-cd92e4cc43 advisory. Rebuild to mitigate CVE-2022-21698 rhbz2067400. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Spoofing Attack

github.com/containerd/containerd is vulnerable to Spoofing Attack. The vulnerability is due to the lack of a definitive specification for manifest and index documents in the OCI Distribution and Image Specifications, allows different interpretations based on the Content-Type header...

K000141393: Containerd vulnerability CVE-2021-41103

Security Advisory Description containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux...

SUSE SLES15 / openSUSE 15 Security Update : containerd (SUSE-SU-2024:3221-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3221-1 advisory. - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc uncontrolled resource consumptio...

openSUSE Security Advisory (SUSE-SU-2024:3221-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3221-1 Security update for containerd

This update for containerd fixes the following issues: - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc uncontrolled resource consumption due to unbound cardinality metrics. bsc1217070 - CVE-2023-45142: Fixed DoS vulnerability in otelhttp. bsc1228553...

SUSE: Security Advisory (SUSE-SU-2024:3221-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : containerd (SUSE-SU-2024:3188-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3188-1 advisory. - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc uncontrolled resource consumption due to unbou...

SUSE-SU-2024:3188-1 Security update for containerd

This update for containerd fixes the following issues: - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc uncontrolled resource consumption due to unbound cardinality metrics. bsc1217070 - CVE-2023-45142: Fixed DoS vulnerability in otelhttp. bsc1228553...

OPENSUSE-SU-2024:14320-1 containerd-1.7.21-1.1 on GA media

These are all security issues fixed in the containerd-1.7.21-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2022-1147 containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd...

GO-2022-0921 Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd...

GO-2022-0803 containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd...

GO-2022-0784 containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd...

GO-2022-0482 containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd...