tocsin

CVE-2025-64329

4 advisories.

Go/github.com/containerd/containerd CVE-2025-64329: medium, EPSS 0.17%

containerd CRI server: Host memory exhaustion through Attach goroutine leak

Action: Upgrade github.com/containerd/containerd to 1.7.29 or later.

go get github.com/containerd/containerd@v1.7.29

Affected

introducedfixedlast affected
01.7.29-

Fixed versions

1.7.29

Sources

CVE-2025-64329 · published · modified · JSON

Go/github.com/containerd/containerd/v2 CVE-2025-64329: medium, EPSS 0.17%

containerd CRI server: Host memory exhaustion through Attach goroutine leak

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.7 or later.

go get github.com/containerd/containerd/v2@v2.0.7
go get github.com/containerd/containerd/v2@v2.1.5
go get github.com/containerd/containerd/v2@v2.2.0

Affected

introducedfixedlast affected
02.0.7-
2.1.0-beta.02.1.5-
2.2.0-beta.02.2.0-

Fixed versions

2.0.72.1.52.2.0

Sources

CVE-2025-64329 · published · modified · JSON

Go/github.com/containerd/containerd CVE-2025-64329: unknown, EPSS 0.17%

containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Action: Upgrade github.com/containerd/containerd to 1.7.29 or later.

go get github.com/containerd/containerd@v1.7.29

Affected

introducedfixedlast affected
01.7.29-

Fixed versions

1.7.29

Sources

CVE-2025-64329 · published · modified · JSON

Go/github.com/containerd/containerd/v2 CVE-2025-64329: unknown, EPSS 0.17%

containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.7 or later.

go get github.com/containerd/containerd/v2@v2.0.7
go get github.com/containerd/containerd/v2@v2.1.5
go get github.com/containerd/containerd/v2@v2.2.0

Affected

introducedfixedlast affected
02.0.7-
2.1.0-beta.02.1.5-
2.2.0-beta.02.2.0-

Fixed versions

2.0.72.1.52.2.0

Sources

CVE-2025-64329 · published · modified · JSON