AZL-99240 CVE-2026-84304 affecting package kata-containers-cc 3.15.0.aks0-20

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

AZL-94232 CVE-2026-55969 affecting package kata-containers-cc 3.15.0.aks0-16

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

AZL-93213 CVE-2026-56852 affecting package kata-containers-cc for versions less than 3.15.0.aks0-16

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-42250 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15

CVE-2026-42250 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15. A patched version of the package is available...

CVE-2025-4574 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14

CVE-2025-4574 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14. A patched version of the package is available...

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14. A patched version of the package is available...

CVE-2026-33814 affecting package kata-containers-cc for versions less than 3.15.0.aks0-12

CVE-2026-33814 affecting package kata-containers-cc for versions less than 3.15.0.aks0-12. A patched version of the package is available...

AZL-87846 CVE-2026-39821 affecting package kata-containers-cc for versions less than 3.15.0.aks0-12

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-10

CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-10. A patched version of the package is available...

AZL-86514 CVE-2026-33814 affecting package kata-containers-cc for versions less than 3.15.0.aks0-12

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

AZL-85229 CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-12

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2024-43806 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7

CVE-2024-43806 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7. A patched version of the package is available...

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7. A patched version of the package is available...

AZL-63848 CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.2.0.azl2-7

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list...

CVE-2023-44487 affecting package kata-containers-cc for versions less than 0.6.1-2

CVE-2023-44487 affecting package kata-containers-cc for versions less than 0.6.1-2. A patched version of the package is available...

CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-43806 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

CVE-2024-43806 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-39325 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

CVE-2023-39325 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: kata-containers / kata-containers-cc / rpm-ostree (CVE-2024-27308)

The version of kata-containers / kata-containers-cc / rpm-ostree installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27308 advisory. - Mio is a Metal I/O library for Rust. When using named pipes on...