HIGH8.0CVE-2021-43816Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd >= 1.5.0, < 1.5.9
HIGH8.0CVE-2021-43816Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd >= 1.5.0, < 1.5.9
from 0, < 1.4.13
HIGH7.5containerd - security update
from 0, < 1.4.13, >= 1.5.0, < 1.5.10, >= 1.6.0, < 1.6.1
HIGH7.3containerd - security update
from 0, < 1.7.29
HIGH7.3containerd - security update
from 0, < 1.7.29
MEDIUM6.3containerd environment variable leak
>= 1.4.0, < 1.4.4
MEDIUM6.1docker.io - security update
from 0, < 1.2.14
MEDIUM6.1docker.io - security update
from 0, < 1.2.14
MEDIUM5.9containerd - security update
from 0, < 1.4.11, >= 1.5.0, < 1.5.7
MEDIUM5.9containerd - security update
from 0, < 1.4.11
MEDIUM5.7containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd
from 0, < 1.5.16, >= 1.6.0, < 1.6.12
MEDIUM5.7containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd
from 0, < 1.5.16
MEDIUM5.5containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd
from 0, < 1.7.29
MEDIUM5.5containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd
from 0, < 1.7.29
MEDIUM5.5Memory exhaustion via OCI image importer in github.com/containerd/containerd
from 0, < 1.5.18, >= 1.6.0, < 1.6.18
MEDIUM5.5Memory exhaustion via OCI image importer in github.com/containerd/containerd
from 0, < 1.5.18
MEDIUM5.5containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd
from 0, < 1.5.13
MEDIUM5.5containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd
from 0, < 1.5.13, >= 1.6.0, < 1.6.6
MEDIUM5.3Privilege escalation via supplementary groups in github.com/containerd/containerd
from 0, < 1.5.18
MEDIUM5.3Privilege escalation via supplementary groups in github.com/containerd/containerd
from 0, < 1.5.18, >= 1.6.0, < 1.6.18
MEDIUM5.2containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd
from 0, < 1.3.9
MEDIUM5.2containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd
from 0, < 1.3.9, >= 1.4.0, < 1.4.3
MEDIUM5.0Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd
from 0, < 1.4.8, >= 1.5.0, < 1.5.4
MEDIUM5.0Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd
from 0, < 1.4.8
MEDIUM4.6containerd - security update
from 0, < 1.6.38, >= 1.7.0-beta.0, < 1.7.27
MEDIUM4.6containerd - security update
>= 1.7.0-beta.0, < 1.7.27
—containerd user ID handling bypass allows runAsNonRoot evasion
>= 1.7.27, < 1.7.32