shim

Sep 26, 2019 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Apr 5, 2019 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Feb 14, 2019 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Nov 21, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Sep 25, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Aug 22, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jul 13, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jul 9, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jun 27, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jun 18, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

May 31, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Apr 24, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Apr 13, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Apr 5, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Mar 27, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Apr 2, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Mar 29, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Feb 13, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Feb 6, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jan 30, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jan 17, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jan 11, 2018 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Dec 5, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Changes in this version

+ func NewLocal(s *Service) shimapi.ShimService — darwin/amd64, js/wasm, linux/amd64

+ type Config struct — darwin/amd64, js/wasm, linux/amd64

+ Criu string

+ Namespace string

+ Path string

+ RuntimeRoot string

+ SystemdCgroup bool

+ WorkDir string

+ type Service struct — darwin/amd64, js/wasm, linux/amd64

+ func NewService(config Config, publisher events.Publisher) (*Service, error)

+ func (s *Service) Checkpoint(ctx context.Context, r *shimapi.CheckpointTaskRequest) (*ptypes.Empty, error)

+ func (s *Service) CloseIO(ctx context.Context, r *shimapi.CloseIORequest) (*ptypes.Empty, error)

+ func (s *Service) Create(ctx context.Context, r *shimapi.CreateTaskRequest) (*shimapi.CreateTaskResponse, error)

+ func (s *Service) Delete(ctx context.Context, r *ptypes.Empty) (*shimapi.DeleteResponse, error)

+ func (s *Service) DeleteProcess(ctx context.Context, r *shimapi.DeleteProcessRequest) (*shimapi.DeleteResponse, error)

+ func (s *Service) Exec(ctx context.Context, r *shimapi.ExecProcessRequest) (*ptypes.Empty, error)

+ func (s *Service) Kill(ctx context.Context, r *shimapi.KillRequest) (*ptypes.Empty, error)

+ func (s *Service) ListPids(ctx context.Context, r *shimapi.ListPidsRequest) (*shimapi.ListPidsResponse, error)

+ func (s *Service) Pause(ctx context.Context, r *ptypes.Empty) (*ptypes.Empty, error)

+ func (s *Service) ResizePty(ctx context.Context, r *shimapi.ResizePtyRequest) (*ptypes.Empty, error)

+ func (s *Service) Resume(ctx context.Context, r *ptypes.Empty) (*ptypes.Empty, error)

+ func (s *Service) ShimInfo(ctx context.Context, r *ptypes.Empty) (*shimapi.ShimInfoResponse, error)

+ func (s *Service) Start(ctx context.Context, r *shimapi.StartRequest) (*shimapi.StartResponse, error)

+ func (s *Service) State(ctx context.Context, r *shimapi.StateRequest) (*shimapi.StateResponse, error)

+ func (s *Service) Update(ctx context.Context, r *shimapi.UpdateTaskRequest) (*ptypes.Empty, error)

+ func (s *Service) Wait(ctx context.Context, r *shimapi.WaitRequest) (*shimapi.WaitResponse, error)

Dec 1, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Nov 8, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Oct 12, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Sep 22, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Sep 6, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Aug 23, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Aug 17, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Aug 10, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Aug 2, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jul 26, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jul 19, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jul 13, 2017 GO-2022-0344 +11 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd