CVE-2026-42250 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15

CVE-2026-42250 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15. A patched version of the package is available...

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14. A patched version of the package is available...

CVE-2025-4574 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14

CVE-2025-4574 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14. A patched version of the package is available...

CVE-2026-33814 affecting package kata-containers-cc for versions less than 3.15.0.aks0-12

CVE-2026-33814 affecting package kata-containers-cc for versions less than 3.15.0.aks0-12. A patched version of the package is available...

CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-10

CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-10. A patched version of the package is available...

CVE-2024-43806 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7

CVE-2024-43806 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7. A patched version of the package is available...

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7. A patched version of the package is available...

AZL-63848 CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list...

CVE-2023-44487 affecting package kata-containers-cc for versions less than 0.6.1-2

CVE-2023-44487 affecting package kata-containers-cc for versions less than 0.6.1-2. A patched version of the package is available...

CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-43806 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

CVE-2024-43806 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-39325 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

CVE-2023-39325 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: kata-containers / kata-containers-cc / rpm-ostree (CVE-2024-27308)

The version of kata-containers / kata-containers-cc / rpm-ostree installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27308 advisory. - Mio is a Metal I/O library for Rust. When using named pipes on...

CBL Mariner 2.0 Security Update: kata-containers-cc / hvloader / kata-containers / nodejs18 (CVE-2023-4807)

The version of kata-containers-cc / hvloader / kata-containers / nodejs18 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4807 advisory. - Issue summary: The POLY1305 MAC message authentication co...

CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1

CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1. A patched version of the package is available...

CVE-2023-39325 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1

CVE-2023-39325 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1. A patched version of the package is available...

CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1

CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1. A patched version of the package is available...

AZL-39217 CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-35659 CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...