containerd vulnerabilities (Ubuntu)
33 vulnerabilities.
-
containerdUbuntu Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net No score -
containerdUbuntu Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net No score -
containerdUbuntu containerd: Unpack DoS via repeated opaque whiteouts 4.6 Medium -
containerdUbuntu containerd CRI plugin: Checkpoint restore bypasses destination security context 7.8 High -
containerdUbuntu HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
containerdUbuntu Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
containerdUbuntu Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
containerdUbuntu HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
containerdUbuntu HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
containerdUbuntu Containerd has image-pull DoS via crafted OCI index graph amplification 6.9 Medium -
containerdUbuntu containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service 6.8 Medium -
containerdUbuntu containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull 9.4 Critical -
containerdUbuntu containerd image-triggered runtime DoS via unbounded group parsing 5.3 Medium -
containerdUbuntu containerd user ID handling bypass allows runAsNonRoot evasion 7.3 High -
containerdUbuntu Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
containerdUbuntu containerd CRI server: Host memory exhaustion through Attach goroutine leak 6.9 Medium -
containerdUbuntu containerd affected by a local privilege escalation via wide permissions on CRI directory 7.3 High -
containerdUbuntu containerd has an integer overflow in User ID handling 4.6 Medium -
containerdUbuntu containerd supplementary groups are not set up properly 5.3 Medium -
containerdUbuntu containerd OCI image importer memory exhaustion 6.2 Medium -
containerdUbuntu containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak 5.7 Medium -
containerdUbuntu containerd CRI plugin: Host memory exhaustion through ExecSync 5.5 Medium -
containerdUbuntu Incorrect Authorization in imgcrypt 7.5 High -
containerdUbuntu Default inheritable capabilities for linux container should be empty 5.9 Medium -
containerdUbuntu Insecure handling of image volumes in containerd CRI plugin 7.5 High -
containerdUbuntu Improper Preservation of Permissions in containerd 8.0 High -
containerdUbuntu Clarify Content-Type handling in OCI spec 3.0 Low -
containerdUbuntu Insufficiently restricted permissions on plugin directories 5.9 Medium -
containerdUbuntu Archive package allows chmod of file outside of unpack target directory 5.0 Medium -
containerdUbuntu environment variable leak 6.3 Medium -
containerdUbuntu containerd-shim API Exposed to Host Network Containers 5.2 Medium -
containerdUbuntu containerd can be coerced into leaking credentials during image pull 6.1 Medium -
containerdUbuntu Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical