GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, k8sgateway, mockgen, kubecolor, rabbitmq-messaging-topology-operator, bom, falcoctl, ini-file, opentofu, wgcf, dex, delve, harbor-registry, rclone, oauth2-proxy, aws-privateca-issuer, kubernetes-csi-driver-hostpath, rancher-system-agent,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: harbor, bom, thanos-operator, gptscript, tekton-chains, tigera-operator, rancher-system-agent, cilium-cli, kubeflow-katib, timescaledb-tune, gobump, kuberlr, argo-events, kpt, rancher, envconsul, aws-application-networking-k8s, dex, cluster-api, nri-redis,...

Exploit for Insufficiently Protected Credentials in Linuxfoundation Containerd

It is an offensive tool for Kubernetes. The repository contains information on various methods to hack and exploit Kubernetes clusters, including articles, videos, and presentations on topics such as securing clusters by eliminating risky permissions, Kubernetes pentest methodology, and container...

Important Photon OS Security Update - PHSA-2025-5.0-0611

Updates of 'containerd', 'vim' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-91-0611

Updates of 'containerd', 'vim' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2021-43816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open source container runtime. On installations using SELinux, such as EL8 CentOS, RHEL, Fedora, or SUSE MicroOS, with containerd since...

Linux Distros Unpatched Vulnerability : CVE-2022-24778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by...

Linux Distros Unpatched Vulnerability : CVE-2021-21334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In containerd an industry-standard container runtime before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation through...

Linux Distros Unpatched Vulnerability : CVE-2022-23471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI strea...

Linux Distros Unpatched Vulnerability : CVE-2025-47291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior to...

Linux Distros Unpatched Vulnerability : CVE-2024-40635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubecolor, etcd, supercronic, gosu, kubernetes-release, cass-operator, kube-metrics-adapter, rancher-system-agent, nri-cassandra, zot, buildkitd, fluxcd-kustomize-mutating-webhook, flux-kustomize-controller, hugo-extended, ghaudit,...

Medium: containerd

Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn more about Amazon...

Amazon Linux 2 : containerd (ALASECS-2025-072)

The version of containerd installed on the remote host is prior to 2.0.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-072 advisory. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive...

Security Bulletin: Containerd can cause an overflow condition where the container ultimately runs as root, which affects IBM watsonx.data

Summary containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately run...

NewStart CGSL MAIN 7.02 : containerd Vulnerability (NS-SA-2025-0134)

The remote NewStart CGSL host, running version MAIN 7.02, has containerd packages installed that are affected by a vulnerability: - containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set a...

containerd:fuzz_FuzzDecompressStream: Crash in ___interceptor_pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5326334937333760 Project: containerd Fuzzing Engine: libFuzzer Fuzz Target: fuzzFuzzDecompressStream Job Type: libfuzzerasancontainerd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7a3e0e565871 Crash State: interceptorpthreadcreate...

Fedora 43 : containerd (2025-bacdac27c8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bacdac27c8 advisory. Automatic update for containerd-2.1.1-1.fc43. Changelog Tue May 20 2025 Bradley G Smith - 2.1.1-1 - Update package to release v2.1.1 - Resolves:...

containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.

...

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2025-1792)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...