Vulnerabilidades en containerd
29 resultadosCVE-2022-23648HIGHInsecure handling of image volumes in containerd CRI pluginEPSS 27.4%CVE-2020-15257MEDIUMcontainerd-shim API Exposed to Host Network ContainersEPSS 3.1%CVE-2022-24778HIGHIncorrect Authorization in imgcryptEPSS 2.7%CVE-2020-15157MEDIUMcontainerd can be coerced into leaking credentials during image pullEPSS 2.3%CVE-2021-21334MEDIUMenvironment variable leakEPSS 1.9%CVE-2021-43816HIGHImproper Preservation of Permissions in containerdEPSS 1.8%CVE-2021-32760MEDIUMArchive package allows chmod of file outside of unpack target directoryEPSS 1.6%CVE-2022-23471MEDIUMcontainerd CRI stream server: Host memory exhaustion through terminal resize goroutine leakEPSS 1.1%CVE-2023-25173MEDIUMcontainerd supplementary groups are not set up properlyEPSS 0.5%CVE-2021-41103MEDIUMInsufficiently restricted permissions on plugin directoriesEPSS 0.5%CVE-2025-47290HIGHContainerd vulnerable to host filesystem access during image unpackEPSS 0.5%CVE-2026-107446MEDIUMcontainerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for EPSS 0.4%CVE-2026-47218CRITICALrunwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandboxEPSS 0.4%CVE-2022-31030MEDIUMcontainerd CRI plugin: Host memory exhaustion through ExecSyncEPSS 0.4%CVE-2023-25153MEDIUMcontainerd OCI image importer memory exhaustionEPSS 0.4%CVE-2026-53493MEDIUMContainerd has image-pull DoS via crafted OCI index graph amplificationEPSS 0.4%CVE-2026-53492HIGHcontainerd CRI checkpoint restore CDI annotation smugglingEPSS 0.4%CVE-2024-40635MEDIUMcontainerd has an integer overflow in User ID handlingEPSS 0.3%CVE-2026-50195MEDIUMcontainerd: CRI checkpoint import allows local image tag poisoningEPSS 0.3%CVE-2025-47291MEDIUMcontainerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.EPSS 0.3%