Go/github.com/containerd/containerd CVE-2025-64329: medium 5.5, EPSS 0.17%
containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd
Action: Upgrade github.com/containerd/containerd to 1.7.29 or later.
go get github.com/containerd/containerd@v1.7.29Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.29 | - |
Fixed versions
| 1.7.29 |
Sources
- osv: GO-2025-4108
- nvd: CVE-2025-64329
- https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2
- https://github.com/containerd/containerd/commit/083b53cd6f19b5de7717b0ce92c11bdf95e612df
CVE-2025-64329 · published · modified · JSON