remote

Nov 29, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Nov 16, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Oct 26, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Oct 9, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Sep 12, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Aug 25, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Aug 24, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jul 27, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jun 2, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

May 10, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Mar 10, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Changes in this version

type RuntimeService

+ func (r *RuntimeService) GetContainerEvents(ctx context.Context, request *runtimeapi.GetEventsRequest, ...) (runtimeapi.RuntimeService_GetContainerEventsClient, error)

Nov 20, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Sep 13, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Aug 14, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jul 27, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

May 5, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Mar 30, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Feb 27, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Feb 15, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Feb 10, 2023 GO-2023-1573 +2 more

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jan 28, 2023 GO-2023-1573 +2 more

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jan 5, 2023 GO-2023-1573 +2 more

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Dec 19, 2022 GO-2023-1573 +2 more

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Dec 15, 2022 GO-2023-1573 +2 more

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Dec 7, 2022 GO-2023-1573 +2 more

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Dec 6, 2022 GO-2022-1147 +3 more

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Nov 14, 2022 GO-2022-1147 +3 more

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Oct 24, 2022 GO-2022-1147 +3 more

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Aug 8, 2022 GO-2022-1147 +3 more

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Aug 4, 2022 GO-2022-1147 +3 more

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jun 6, 2022 GO-2022-1147 +3 more

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jun 3, 2022 GO-2022-0482 +4 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

May 3, 2022 GO-2022-0482 +4 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Apr 25, 2022 GO-2022-0482 +4 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Mar 24, 2022 GO-2022-0482 +4 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Mar 2, 2022 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Feb 16, 2022 GO-2022-0344 +6 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Feb 10, 2022 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Feb 8, 2022 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Feb 3, 2022 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jan 20, 2022 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jan 12, 2022 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jan 6, 2022 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Dec 14, 2021 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Nov 19, 2021 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Nov 11, 2021 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Oct 22, 2021 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Oct 11, 2021 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Feb 15, 2023 GO-2023-2412

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jan 28, 2023 GO-2023-1573 +2 more

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Dec 7, 2022 GO-2023-1573 +2 more

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Dec 6, 2022 GO-2022-1147 +3 more

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Oct 24, 2022 GO-2022-1147 +3 more

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jun 6, 2022 GO-2022-1147 +3 more

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Jun 3, 2022 GO-2022-0482 +4 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Mar 24, 2022 GO-2022-0482 +4 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

Mar 2, 2022 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jan 5, 2022 GO-2022-0344 +6 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Nov 17, 2021 GO-2022-0278 +7 more

  GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Oct 4, 2021 GO-2022-0278 +8 more

  GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Sep 29, 2021 GO-2022-0278 +9 more

  GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jul 29, 2021 GO-2022-0278 +9 more

  GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jul 19, 2021 GO-2022-0278 +9 more

  GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jul 13, 2021 GO-2022-0278 +10 more

  GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

May 19, 2021 GO-2022-0278 +10 more

  GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

May 13, 2021 GO-2022-0278 +10 more

  GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

May 3, 2021 GO-2022-0278 +10 more

  GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Changes in this version

+ func NewImageService(endpoint string, connectionTimeout time.Duration) (internalapi.ImageManagerService, error)

+ func NewRuntimeService(endpoint string, connectionTimeout time.Duration) (internalapi.RuntimeService, error)

+ type ImageService struct

+ func (r *ImageService) ImageFsInfo() ([]*runtimeapi.FilesystemUsage, error)

+ func (r *ImageService) ImageStatus(image *runtimeapi.ImageSpec) (*runtimeapi.Image, error)

+ func (r *ImageService) ListImages(filter *runtimeapi.ImageFilter) ([]*runtimeapi.Image, error)

+ func (r *ImageService) PullImage(image *runtimeapi.ImageSpec, auth *runtimeapi.AuthConfig, ...) (string, error)

+ func (r *ImageService) RemoveImage(image *runtimeapi.ImageSpec) error

+ type RuntimeService struct

+ func (r *RuntimeService) Attach(req *runtimeapi.AttachRequest) (*runtimeapi.AttachResponse, error)

+ func (r *RuntimeService) ContainerStats(containerID string) (*runtimeapi.ContainerStats, error)

+ func (r *RuntimeService) ContainerStatus(containerID string) (*runtimeapi.ContainerStatus, error)

+ func (r *RuntimeService) CreateContainer(podSandBoxID string, config *runtimeapi.ContainerConfig, ...) (string, error)

+ func (r *RuntimeService) Exec(req *runtimeapi.ExecRequest) (*runtimeapi.ExecResponse, error)

+ func (r *RuntimeService) ExecSync(containerID string, cmd []string, timeout time.Duration) (stdout []byte, stderr []byte, err error)

+ func (r *RuntimeService) ListContainerStats(filter *runtimeapi.ContainerStatsFilter) ([]*runtimeapi.ContainerStats, error)

+ func (r *RuntimeService) ListContainers(filter *runtimeapi.ContainerFilter) ([]*runtimeapi.Container, error)

+ func (r *RuntimeService) ListPodSandbox(filter *runtimeapi.PodSandboxFilter) ([]*runtimeapi.PodSandbox, error)

+ func (r *RuntimeService) PodSandboxStatus(podSandBoxID string) (*runtimeapi.PodSandboxStatus, error)

+ func (r *RuntimeService) PortForward(req *runtimeapi.PortForwardRequest) (*runtimeapi.PortForwardResponse, error)

+ func (r *RuntimeService) RemoveContainer(containerID string) error

+ func (r *RuntimeService) RemovePodSandbox(podSandBoxID string) error

+ func (r *RuntimeService) ReopenContainerLog(containerID string) error

+ func (r *RuntimeService) RunPodSandbox(config *runtimeapi.PodSandboxConfig, runtimeHandler string) (string, error)

+ func (r *RuntimeService) StartContainer(containerID string) error

+ func (r *RuntimeService) Status() (*runtimeapi.RuntimeStatus, error)

+ func (r *RuntimeService) StopContainer(containerID string, timeout int64) error

+ func (r *RuntimeService) StopPodSandbox(podSandBoxID string) error

+ func (r *RuntimeService) UpdateContainerResources(containerID string, resources *runtimeapi.LinuxContainerResources) error

+ func (r *RuntimeService) UpdateRuntimeConfig(runtimeConfig *runtimeapi.RuntimeConfig) error

+ func (r *RuntimeService) Version(apiVersion string) (*runtimeapi.VersionResponse, error)

Apr 26, 2021 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Apr 20, 2021 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Apr 13, 2021 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Apr 9, 2021 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Mar 16, 2021 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Mar 5, 2021 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Feb 26, 2021 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Feb 5, 2021 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Jan 21, 2021 GO-2022-0482 +5 more

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd