The Linux Foundation containerd 2.2.0 Release Candidate 0
Approved changes feed: RSS · Atom
cpe:2.3:a:linuxfoundation:containerd:2.2.0:rc0:*:*:*:*:*:*
part: a version: 2.2.0 update: rc0
| Vendor | Linuxfoundation (4b459c90-8cdb-5268-beb4-b69b5fe74234) |
|---|---|
| Product | Containerd (3316a759-b835-5d36-9eca-c29292f4e592) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/containerd |
purl2cpe | 2026-06-01 10:13:21.914202 |
pkg:deb/ubuntu/containerd |
purl2cpe | 2026-06-01 10:13:21.914203 |
pkg:github/containerd/containerd |
purl2cpe | 2026-06-01 10:13:21.914205 |
pkg:rpm/fedora/containerd |
purl2cpe | 2026-06-01 10:13:21.914206 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-64329 |
vulnerable | 2026-06-08 07:39:18.394592 |
containerd CRI server: Host memory exhaustion through Attach goroutine leak
containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. To workaround this vulnerability, users can set up an admission controller to control accesses to pods/attach resources.
Published: 2025-11-07T04:15:09.381Z
Updated: 2025-11-07T17:42:07.929Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25621 |
vulnerable | 2026-06-08 06:31:23.595110 |
containerd affected by a local privilege escalation via wide permissions on CRI directory
HIGH (7.3)
containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system administrator permissions so the host can manually chmod the directories to not have group or world accessible permissions, or to run containerd in rootless mode.
Published: 2025-11-06T18:36:21.566Z
Updated: 2025-11-06T19:35:13.415Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.