Lucene search
Veracode Vulnerability DatabaseVERACODE:38367HistoryDec 08, 2022 - 3:54 a.m.
Denial Of Service (DoS)
2022-12-0803:54:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
containerd vulnerability denial exhausted memory crash application attack vulnerability server software command httpstream.
EPSS
0.001
Percentile
41.0%
github.com/containerd/containerd is vulnerable to denial of service. The vulnerability exists in the CRI stream server of httpstream.go due to exhausted memory on the host, which allows an attacker to cause an application crash via issuing a faulty command.
References
github.com/advisories/GHSA-2qjp-425j-52j9
github.com/containerd/containerd/commit/2e3140a0e09d288a9086474752b4478aa0964e7c
github.com/containerd/containerd/commit/a05d175400b1145e5e6a735a6710579d181e7fb0
github.com/containerd/containerd/releases/tag/v1.5.16
github.com/containerd/containerd/releases/tag/v1.6.12
github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9
Related
openvas
openvas
Huawei EulerOS: Security Advisory for containerd (EulerOS-SA-2023-1580)
2023-03-23 00:00:00
Huawei EulerOS: Security Advisory for containerd (EulerOS-SA-2023-1462)
2023-03-09 00:00:00
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2023-1546)
2023-03-20 00:00:00
alpinelinux
alpinelinux
CVE-2022-23471
2022-12-07 23:15:09
cbl_mariner
cbl_mariner
CVE-2022-23471 affecting package moby-containerd 1.6.6+azure-4
2022-12-27 17:56:02
osv
osv
CGA-57rr-rppf-cc3f
2024-06-06 12:24:01
CGA-hc4p-65g6-x5p4
2024-06-06 12:27:41
prion
prion
Command injection
2022-12-07 23:15:00
nessus
nessus
EulerOS 2.0 SP9 : containerd (EulerOS-SA-2023-1462)
2023-03-08 00:00:00
EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2023-1521)
2023-03-19 00:00:00
Photon OS 3.0: Containerd PHSA-2023-3.0-0538
2024-07-24 00:00:00
debiancve
debiancve
CVE-2022-23471
2022-12-07 23:15:09
redos
redos
ROS-20221223-01
2022-12-23 00:00:00
nvd
nvd
CVE-2022-23471
2022-12-07 23:15:09
cgr
cgr
CVE-2022-23471 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2022-23471
2022-12-08 00:00:00
ibm
ibm
cve
cve
CVE-2022-23471
2022-12-07 23:15:09
github
github
cvelist
cvelist
wolfi
wolfi
CVE-2022-23471 vulnerabilities
2024-10-01 09:27:37
fedora
fedora
[SECURITY] Fedora 37 Update: containerd-1.6.14-2.fc37
2022-12-26 01:06:09
[SECURITY] Fedora 37 Update: golang-github-containerd-cgroups-1.0.4-3.fc37
2022-12-26 01:06:10
[SECURITY] Fedora 37 Update: moby-engine-20.10.21-1.fc37
2022-12-26 01:06:10
mageia
mageia
Updated docker-containerd packages fix security vulnerability
2023-08-23 22:56:41
ubuntu
ubuntu
containerd vulnerabilities
2022-12-13 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0618
2023-07-26 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0329
2023-02-08 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0038
2023-06-27 00:00:00
gentoo
gentoo
containerd: Multiple Vulnerabilities
2024-01-31 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00