This tool was mainly created for the purpose of viewing, creating, and pushing the new manifests list object type in the Docker registry. Manifest lists are defined in the v2.2 image specification and exist mainly for the purpose of supporting multi-architecture and/or multi-platform images within a Docker registry.

OSVersionArchitecturePackageVersionFilename
Fedora36anymanifest-tool< 2.0.8UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	36	any	manifest-tool	< 2.0.8	UNKNOWN

fedora 14

openvas 28

cbl_mariner 5

veracode 2

redhatcve 2

nessus 50

nvd 2

cgr 2

debiancve 2

cvelist 2

wolfi 2

alpinelinux 2

prion 2

redhat 23

github 2

ibm 12

osv 22

cve 2

ubuntucve 2

gitlab 2

ubuntu 2

redos 2

debian 1

mageia 1

photon 6

oraclelinux 3

almalinux 4

fedora

[SECURITY] Fedora 38 Update: manifest-tool-2.0.8-1.fc38

2023-03-11 04:06:10

[SECURITY] Fedora 37 Update: manifest-tool-2.0.8-1.fc37

2023-03-15 01:10:12

[SECURITY] Fedora 36 Update: containerd-1.6.19-1.fc36

2023-03-16 18:20:00

openvas

Fedora: Security Advisory for manifest-tool (FEDORA-2023-5312f6200c)

2023-03-12 00:00:00

Fedora: Security Advisory for manifest-tool (FEDORA-2023-11dafed208)

2023-03-15 00:00:00

Fedora: Security Advisory for manifest-tool (FEDORA-2023-a4baceec07)

2023-03-15 00:00:00

cbl_mariner

CVE-2023-25173 affecting package moby-containerd 1.6.6+azure-7

2023-03-16 03:40:27

CVE-2023-25173 affecting package k3s 1.24.12-2

2024-07-03 03:08:37

CVE-2023-25173 affecting package moby-containerd for versions less than 1.6.18-2

2023-03-24 23:56:25

veracode

Privilege Escalation

2023-02-17 08:54:33

Denial Of Service (DoS)

2023-01-03 11:23:54

redhatcve

CVE-2023-25173

2023-03-01 20:29:40

CVE-2022-3064

2023-01-23 05:06:02

nessus

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2023-374)

2023-10-03 00:00:00

Fedora 38 : manifest-tool (2023-5312f6200c)

2023-03-10 00:00:00

RHEL 8 : cli (Unpatched Vulnerability)

2024-06-03 00:00:00

nvd

CVE-2023-25173

2023-02-16 15:15:20

CVE-2022-3064

2022-12-27 22:15:14

cgr

CVE-2023-25173 vulnerabilities

2024-05-19 03:07:16

CVE-2022-3064 vulnerabilities

2024-05-19 03:07:16

debiancve

CVE-2023-25173

2023-02-16 15:15:20

CVE-2022-3064

2022-12-27 22:15:14

cvelist

CVE-2023-25173 containerd supplementary groups are not set up properly

2023-02-16 14:09:12

CVE-2022-3064 Excessive resource consumption in gopkg.in/yaml.v2

2022-12-27 21:17:41

wolfi

CVE-2023-25173 vulnerabilities

2024-07-03 09:08:38

CVE-2022-3064 vulnerabilities

2024-07-03 09:08:38

alpinelinux

CVE-2023-25173

2023-02-16 15:15:20

CVE-2022-3064

2022-12-27 22:15:00

prion

Design/Logic Flaw

2023-02-16 15:15:00

Design/Logic Flaw

2022-12-27 22:15:00

redhat

(RHSA-2023:4671) Moderate: OpenShift Container Platform 4.12.30 bug fix and security update

2023-08-23 16:28:16

(RHSA-2023:2695) Moderate: OpenShift Container Platform 4.11.40 security update

2023-05-18 03:06:46

(RHSA-2023:2111) Moderate: OpenShift Container Platform 4.12.16 security update

2023-05-10 05:15:04

github

yaml package for Go can consume excessive amounts of CPU or memory

2022-12-28 00:30:22

Supplementary groups are not set up properly in github.com/containerd/containerd

2023-02-16 14:11:33

ibm

Security Bulletin: Vulnerability in the Golang language affects IBM Event Streams (CVE-2022-3064)

2023-03-06 07:49:07

Security Bulletin: Multiple vulnerabilities in containerd may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2023-25153, CVE-2023-25173)

2024-01-09 15:46:13

Security Bulletin: A vulnerability in github.com/containerd/containerd-v1.6.17 affects Data Replication on Cloud Pak for Data

2024-06-28 12:46:52

osv

CVE-2022-3064

2022-12-27 22:15:14

yaml package for Go can consume excessive amounts of CPU or memory

2022-12-28 00:30:22

Excessive resource consumption in gopkg.in/yaml.v2

2022-08-29 22:15:46

cve

CVE-2022-3064

2022-12-27 22:15:14

CVE-2023-25173

2023-02-16 15:15:20

ubuntucve

CVE-2023-25173

2023-02-16 00:00:00

CVE-2022-3064

2022-12-27 00:00:00

gitlab

yaml package for Go can consume excessive amounts of CPU or memory

2022-12-28 00:00:00

Uncontrolled Resource Consumption

2022-12-27 00:00:00

ubuntu

containerd vulnerabilities

2023-07-05 00:00:00

Go yaml vulnerabilities

2023-08-14 00:00:00

redos

ROS-20230322-02

2023-03-22 00:00:00

ROS-20240418-06

2024-04-18 00:00:00

debian

[SECURITY] [DLA 3479-1] golang-yaml.v2 security update

2023-07-05 20:29:31

mageia

Updated docker-containerd packages fix security vulnerability

2023-08-23 22:56:41

photon

Critical Photon OS Security Update - PHSA-2023-3.0-0618

2023-07-26 00:00:00

Critical Photon OS Security Update - PHSA-2023-4.0-0350

2023-03-07 00:00:00

Important Photon OS Security Update - PHSA-2023-4.0-0433

2023-07-21 00:00:00

oraclelinux

container-tools:ol8 security and bug fix update

2023-11-18 00:00:00

buildah security update

2023-11-11 00:00:00

podman security, bug fix, and enhancement update

2023-11-11 00:00:00

almalinux

Moderate: container-tools:rhel8 security and bug fix update

2023-11-14 00:00:00

Moderate: buildah security update

2023-11-07 00:00:00

Moderate: toolbox security and bug fix update

2023-11-07 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.005 Low

EPSS

Percentile

76.8%

JSON

Related for FEDORA:4581630B300C