Alpine/containerd: medium 5.5
containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted
Action: Upgrade containerd to 1.6.18-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0 | 1.6.18-r0 | - |
Fixed versions
| 1.6.18-r0 |
Sources
- osv: ALPINE-CVE-2023-25153#Alpine:v3.22/containerd
- https://security.alpinelinux.org/vuln/CVE-2023-25153
published · modified · JSON