Go/github.com/containerd/containerd/v2 CVE-2024-40635: unknown, EPSS 0.30%

containerd has an integer overflow in User ID handling in github.com/containerd/containerd

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.4 or later.

go get github.com/containerd/containerd/v2@v2.0.4

Affected

Fixed versions

Sources

• osv: GO-2025-3528#Go/github.com/containerd/containerd/v2
• https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg
• https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da
• https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20
• https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a

CVE-2024-40635 · published 2025-03-18T18:14:48Z · modified 2026-02-04T03:50:47.304274Z · JSON