Astra Linux – Vulnerability in containerd-app

Containerd is an open-source container runtime. A bug was discovered in Containerd prior to versions 1.6.38, 1.7.27, and 2.0.4. In these versions, containers launched with a User set as UID:GID that exceeded the maximum 32-bit signed integer could cause an overflow condition, resulting in the...

USN-7374-1: containerd vulnerability

Benjamin Koltermann discovered that containerd incorrectly handled large user id values. This could result in containers possibly being run as root, contrary to expectations...

AZL-60893 CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-9

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...

PT-2018-2514

Name of the Vulnerable Software and Affected Versions PolicyKit versions 0.115 Description The issue is related to errors in handling large user ID values exceeding INT MAX in the PolicyKit platform, which can lead to the execution of any systemctl command. This can allow an attacker to bypass...