containerd vulnerabilities (Debian)
25 vulnerabilities.
-
containerdDebian containerd: Unpack DoS via repeated opaque whiteouts 4.6 Medium -
containerdDebian containerd CRI plugin: Checkpoint restore bypasses destination security context 7.8 High -
containerdDebian Containerd has image-pull DoS via crafted OCI index graph amplification 6.9 Medium -
containerdDebian containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service 6.8 Medium -
containerdDebian containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull 9.4 Critical -
containerdDebian containerd: CRI checkpoint import allows local image tag poisoning 5.6 Medium -
containerdDebian containerd image-triggered runtime DoS via unbounded group parsing 5.3 Medium -
containerdDebian containerd CRI checkpoint restore CDI annotation smuggling 8.4 High -
containerdDebian containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore 8.2 High -
containerdDebian containerd user ID handling bypass allows runAsNonRoot evasion 7.3 High -
containerdDebian containerd CRI server: Host memory exhaustion through Attach goroutine leak 6.9 Medium -
containerdDebian containerd affected by a local privilege escalation via wide permissions on CRI directory 7.3 High -
containerdDebian containerd has an integer overflow in User ID handling 4.6 Medium -
containerdDebian containerd supplementary groups are not set up properly 5.3 Medium -
containerdDebian containerd OCI image importer memory exhaustion 6.2 Medium -
containerdDebian containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak 5.7 Medium -
containerdDebian containerd CRI plugin: Host memory exhaustion through ExecSync 5.5 Medium -
containerdDebian Default inheritable capabilities for linux container should be empty 5.9 Medium -
containerdDebian Insecure handling of image volumes in containerd CRI plugin 7.5 High -
containerdDebian Improper Preservation of Permissions in containerd 8.0 High -
containerdDebian Insufficiently restricted permissions on plugin directories 5.9 Medium -
containerdDebian Archive package allows chmod of file outside of unpack target directory 5.0 Medium -
containerdDebian environment variable leak 6.3 Medium -
containerdDebian containerd-shim API Exposed to Host Network Containers 5.2 Medium -
containerdDebian containerd can be coerced into leaking credentials during image pull 6.1 Medium