Alpine/containerd: high 7.5
Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 ce
Action: Upgrade containerd to 1.3.3-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.3-r0 | - |
Fixed versions
| 1.3.3-r0 |
Sources
- osv: ALPINE-CVE-2020-7919#Alpine:v3.13/containerd
- https://security.alpinelinux.org/vuln/CVE-2020-7919
published · modified · JSON