vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

kata-cve-2020-2023-poc

kata-cve-2020-2023-poc 1. Reproduce Environment Note: The environment needs support KVM https://github.com/ssst0n3/dockerarchive/tree/branchubuntu-20.04docker-ce-19.03.11containerd.io-1.4.9kata-1.11.0 $ git clone https://github.com/ssst0n3/dockerarchive.git $ cd dockerarchive $ git checkout...

AZL-111709 CVE-2026-116591 affecting package kata-containers-preview 3.27.0~preview2-2

compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...

AZL-111995 CVE-2026-116591 affecting package kata-containers-cc 3.15.0.aks0-23

compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...

AZL-111992 CVE-2026-116591 affecting package kata-containers 4.1.0.kata0-1

compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...

AZL-108053 CVE-2026-95838 affecting package kata-containers-preview 3.27.0~preview2-2

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout configurations. A malicious image layer can trigger repeated directory traversals while opaque whiteouts are...

AZL-108075 CVE-2026-95838 affecting package kata-containers-cc 3.15.0.aks0-23

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout configurations. A malicious image layer can trigger repeated directory traversals while opaque whiteouts are...

EulerOS 2.0 SP13 : kata-containers (EulerOS-SA-2026-4055)

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like...

EulerOS 2.0 SP11 : kata-containers (EulerOS-SA-2026-4239)

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like...

EulerOS 2.0 SP13 : kata-containers (EulerOS-SA-2026-4146)

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like...

EulerOS 2.0 SP11 : kata-containers (EulerOS-SA-2026-4330)

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like...

kata-containers

Kata Containers Benvenuti in Kata Containers! Questo repository è la sede del codice di Kata Containers per le release 2.0 e successive. Se volete saperne di più su Kata Containers, visitate il sito principale di Kata Containers. Introduzione Kata Containers è un progetto open source e una...

AZL-107562 CVE-2026-97032 affecting package kata-containers for versions less than 4.1.0.kata1-2

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107589 CVE-2026-97032 affecting package kata-containers-cc for versions less than 3.15.0.aks0-23

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107081 CVE-2026-97032 affecting package kata-containers-preview 3.27.0~preview2-2

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107577 CVE-2026-78669 affecting package kata-containers-cc for versions less than 3.15.0.aks0-23

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107553 CVE-2026-78669 affecting package kata-containers for versions less than 4.1.0.kata1-2

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107102 CVE-2026-78669 affecting package kata-containers-preview 3.27.0~preview2-2

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107096 CVE-2026-78660 affecting package kata-containers-preview 3.27.0~preview2-2

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107564 CVE-2026-78659 affecting package kata-containers for versions less than 4.1.0.kata1-2

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...