containerd-app vulnerabilities (Ubuntu)
15 vulnerabilities.
-
containerd-appUbuntu containerd: Unpack DoS via repeated opaque whiteouts 4.6 Medium -
containerd-appUbuntu containerd CRI plugin: Checkpoint restore bypasses destination security context 7.8 High -
containerd-appUbuntu Containerd has image-pull DoS via crafted OCI index graph amplification 6.9 Medium -
containerd-appUbuntu containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service 6.8 Medium -
containerd-appUbuntu containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull 9.4 Critical -
containerd-appUbuntu containerd: CRI checkpoint import allows local image tag poisoning 5.6 Medium -
containerd-appUbuntu containerd image-triggered runtime DoS via unbounded group parsing 5.3 Medium -
containerd-appUbuntu containerd CRI checkpoint restore CDI annotation smuggling 8.4 High -
containerd-appUbuntu containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore 8.2 High -
containerd-appUbuntu containerd user ID handling bypass allows runAsNonRoot evasion 7.3 High -
containerd-appUbuntu Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
containerd-appUbuntu containerd CRI server: Host memory exhaustion through Attach goroutine leak 6.9 Medium -
containerd-appUbuntu containerd affected by a local privilege escalation via wide permissions on CRI directory 7.3 High -
containerd-appUbuntu containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. 4.6 Medium -
containerd-appUbuntu containerd has an integer overflow in User ID handling 4.6 Medium