82 matches found
AZL-34996 CVE-2023-39325 affecting package moby-containerd-cc for versions less than 1.7.1-5
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
AZL-31328 CVE-2023-44487 affecting package moby-containerd for versions less than 1.6.22-2
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-31491 CVE-2023-44487 affecting package moby-containerd-cc for versions less than 1.7.1-5
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-34997 CVE-2023-44487 affecting package moby-containerd-cc for versions less than 1.7.1-5
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
CVE-2023-25153 affecting package moby-containerd for versions less than 1.6.18-2
CVE-2023-25153 affecting package moby-containerd for versions less than 1.6.18-2. An upgraded version of the package is available that resolves this issue...
CVE-2023-25173 affecting package moby-containerd for versions less than 1.6.18-2
CVE-2023-25173 affecting package moby-containerd for versions less than 1.6.18-2. An upgraded version of the package is available that resolves this issue...
CBL Mariner 2.0 Security Update: moby-containerd (CVE-2021-41103)
The version of moby-containerd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-41103 advisory. - containerd is an open source container runtime with an emphasis on simplicity, robustness and...
CBL Mariner 2.0 Security Update: moby-containerd (CVE-2022-23471)
The version of moby-containerd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-23471 advisory. - containerd is an open source container runtime. A bug was found in containerd's CRI implementation...
CVE-2023-25173 affecting package moby-containerd 1.6.6+azure-7
CVE-2023-25173 affecting package moby-containerd 1.6.6+azure-7. A patched version of the package is available...
CVE-2023-25153 affecting package moby-containerd 1.6.6+azure-7
CVE-2023-25153 affecting package moby-containerd 1.6.6+azure-7. A patched version of the package is available...
AZL-13673 CVE-2023-25173 affecting package moby-containerd for versions less than 1.6.18-2
containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be ab...
AZL-13674 CVE-2023-25153 affecting package moby-containerd for versions less than 1.6.18-2
containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could cause a denial of service. This bug h...
CVE-2022-23471 affecting package moby-containerd for versions less than 1.6.12-3
CVE-2022-23471 affecting package moby-containerd for versions less than 1.6.12-3. An upgraded version of the package is available that resolves this issue...
CVE-2022-23471 affecting package moby-containerd 1.6.6+azure-4
CVE-2022-23471 affecting package moby-containerd 1.6.6+azure-4. A patched version of the package is available...
AZL-11585 CVE-2022-23471 affecting package moby-containerd for versions less than 1.6.12-3
containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, f...
CVE-2022-31030 affecting package moby-containerd 1.5.9+azure-7
CVE-2022-31030 affecting package moby-containerd 1.5.9+azure-7. An upgraded version of the package is available that resolves this issue...
CVE-2022-31030 affecting package moby-containerd for versions less than 1.6.6-1
CVE-2022-31030 affecting package moby-containerd for versions less than 1.6.6-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-32760 affecting package moby-containerd for versions less than 1.4.4+azure-4
CVE-2021-32760 affecting package moby-containerd for versions less than 1.4.4+azure-4. A patched version of the package is available...
CVE-2021-41103 affecting package moby-containerd for versions less than 1.4.4+azure-4
CVE-2021-41103 affecting package moby-containerd for versions less than 1.4.4+azure-4. A patched version of the package is available...