13271 matches found
CVE-2025-52881 vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent, docker-machine-driver-harvester, osv-scanner, trivy, ctop, k8s-device-plugin, trivy-operator, mesosphere-vsphere-csi, k3s, nerdctl, podman, grype, checksec, syft, kots, xeol, falco-no-driver, k9s, skaffold, sriov-network-device-plugin,...
GHSA-CGRX-MC8F-2PRM vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-nfs-fips, kubernetes, zot, ctop-fips, amazon-k8s-cni-fips, neuvector-fips, k9s, longhorn-share-manager, envoy-gateway-fips, kubescape, blob-csi, k9s-fips, eks-distro, volcano, osv-scanner, trivy, node-feature-discovery, trivy-fips,...
CVE-2025-52881 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-nfs-fips, kubernetes, zot, ctop-fips, amazon-k8s-cni-fips, neuvector-fips, k9s, longhorn-share-manager, envoy-gateway-fips, kubescape, blob-csi, k9s-fips, eks-distro, volcano, osv-scanner, trivy, node-feature-discovery, trivy-fips,...
CVE-2025-64329
containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is...
CVE-2025-52881
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts we have also verified thi...
CVE-2025-52881 runc: LSM labels can be bypassed with malicious config using dummy procfs files
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts we have also verified thi...
CVE-2025-52881
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts we have also verified thi...
CVE-2024-25621
containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...
SUSE CVE-2025-52881
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts we have also verified thi...
docker-compose-control-center (>=2.4.0, <=3.0.0) potentially affected by CVE-2025-64458 via django (2.1.8)
django PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =2.4.0, =3.0.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...
docker-compose-control-center (3.1.0) potentially affected by CVE-2025-64459 via django (2.1.10)
django PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center 3.1.0 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...
docker-compose-control-center (>=2.4.0, <=3.0.0) potentially affected by CVE-2025-64459 via django (2.1.8)
django PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =2.4.0, =3.0.0 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...
docker-compose-control-center (3.1.0) potentially affected by CVE-2025-64458 via django (2.1.10)
django PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center 3.1.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...
docker-compose-control-center (>=3.1.1, <=3.1.2) potentially affected by CVE-2025-64459 via django (2.1.11)
django PYPI version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =3.1.1, =3.1.2 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...
docker-compose-control-center (>=3.1.1, <=3.1.2) potentially affected by CVE-2025-64458 via django (2.1.11)
django PYPI version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =3.1.1, =3.1.2 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...
UBUNTU-CVE-2025-52881
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts we have also verified thi...
Fedora 44 : docker-buildkit (2025-c1b04cbaba)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c1b04cbaba advisory. Automatic update for docker-buildkit-0.25.2-1.fc44. Changelog Wed Nov 5 2025 Bradley G Smith - 0.25.2-1 - Update to v0.25.2 - CVE-2025-58183;...
Low: runc
Issue Overview: No CVE associated with this advisory Affected Packages: runc Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue...
PT-2026-22403
Name of the Vulnerable Software and Affected Versions Docker Model Runner versions prior to 1.0.16 Docker Desktop versions prior to 4.61.0 when Model Runner is enabled Description Docker Model Runner is software used to manage, run, and deploy AI models using Docker. Versions prior to 1.0.16 expo...
