containerd vulnerabilities (Alpine)
31 vulnerabilities.
-
containerdAlpine Containerd has image-pull DoS via crafted OCI index graph amplification 6.9 Medium -
containerdAlpine containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service 6.8 Medium -
containerdAlpine containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull 9.4 Critical -
containerdAlpine containerd: CRI checkpoint import allows local image tag poisoning 5.6 Medium -
containerdAlpine containerd image-triggered runtime DoS via unbounded group parsing 5.3 Medium -
containerdAlpine containerd CRI checkpoint restore CDI annotation smuggling 8.4 High -
containerdAlpine containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore 8.2 High -
containerdAlpine containerd user ID handling bypass allows runAsNonRoot evasion 7.3 High -
containerdAlpine SpdyStream: DOS on CRI 8.7 High -
containerdAlpine Containerd vulnerable to host filesystem access during image unpack 7.6 High -
containerdAlpine containerd supplementary groups are not set up properly 5.3 Medium -
containerdAlpine containerd OCI image importer memory exhaustion 6.2 Medium -
containerdAlpine containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak 5.7 Medium -
containerdAlpine containerd CRI plugin: Host memory exhaustion through ExecSync 5.5 Medium -
containerdAlpine Default inheritable capabilities for linux container should be empty 5.9 Medium -
containerdAlpine Insecure handling of image volumes in containerd CRI plugin 7.5 High -
containerdAlpine Improper Preservation of Permissions in containerd 8.0 High -
containerdAlpine Clarify Content-Type handling in OCI spec 3.0 Low -
containerdAlpine Insufficiently restricted permissions on plugin directories 5.9 Medium -
containerdAlpine Archive package allows chmod of file outside of unpack target directory 5.0 Medium -
containerdAlpine environment variable leak 6.3 Medium -
containerdAlpine containerd-shim API Exposed to Host Network Containers 5.2 Medium -
containerdAlpine Helm uses crypto package vulnerable to panic from malformed X.509 certificate 7.5 High -
containerdAlpine opencontainers runc contains procfs race condition with a shared volume mount 7.0 High -
containerdAlpine A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic... 8.1 High -
containerdAlpine Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic... 7.5 High -
containerdAlpine Incorrect Authorization in runc 7.5 High -
containerdAlpine Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service 7.5 High -
containerdAlpine Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
containerdAlpine Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
containerdAlpine Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network... 7.5 High