CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

514 matches found

AstraLinux•added 2026/01/13 2:1 p.m.•5 views

Astra Linux – Vulnerability in containerd-app

Containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation, where a user may exhaust memory on the host due to goroutine leaks. This issue has...

6.9CVSS5.3AI score0.00162EPSS

Exploits1References3

Tenable Nessus•added 2025/11/18 12:0 a.m.•3 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56756)

nvme-pci: vulnerability involves an incorrect size being passed to dmafreecoherent in nvme-pci due to nvmeallochostmem potentially using fewer descriptors than planned, which is fixed by ensuring the correct size is used for freeing the HMB descriptor table. This plugin only works with Tenable.ot...

5.5CVSS6.9AI score0.00215EPSS

Exploits0References3

Microsoft CVE•added 2025/11/08 9:1 a.m.•6 views

containerd CRI server: Host memory exhaustion through Attach goroutine leak

...

6.9CVSS6.7AI score0.00162EPSS

Exploits1

Vulnrichment•added 2025/11/07 4:15 a.m.•3 views

CVE-2025-64329 containerd CRI server: Host memory exhaustion through Attach goroutine leak

containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is...

6.9CVSS6.3AI score0.00162EPSS

Exploits1References2

CNNVD•added 2025/11/07 12:0 a.m.•5 views

containerd 安全漏洞

containerd is an industry-standard container runtime open-sourced by containerd. A security vulnerability exists in containerd versions 1.7.28 and earlier, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1, which stems from a goroutine in the CRI Attach...

6.9CVSS5.3AI score0.00162EPSS

Exploits1References4

Github Security Blog•added 2025/11/06 11:32 p.m.•13 views

containerd CRI server: Host memory exhaustion through Attach goroutine leak

Impact A bug was found in containerd's CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. Repetitive calls of CRI Attach e.g., kubectl attach could increase the memory usage of containerd. Patches This bug has been fixed in the following containerd...

6.9CVSS6.7AI score0.00162EPSS

Exploits1References4Affected Software2