Memory exhaustion via OCI image importer in github.com/containerd/containerd
When importing an OCI image, there was no limit on the number of bytes read from the io.Reader passed into ImportIndex. A large number of bytes could be read from this and could cause a denial of service.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-25153US | medium5.5 | — | ||
containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4FIX
- https://github.com/containerd/containerd/releases/tag/v1.5.18WEB
- https://github.com/containerd/containerd/releases/tag/v1.6.18WEB
- https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan