Memory exhaustion via OCI image importer in github.com/containerd/containerd
When importing an OCI image, there was no limit on the number of bytes read from the io.Reader passed into ImportIndex. A large number of bytes could be read from this and could cause a denial of service.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-25153US | medium5.5 | — | ||
containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4FIX
- https://github.com/containerd/containerd/releases/tag/v1.5.18WEB
- https://github.com/containerd/containerd/releases/tag/v1.6.18WEB
- https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan