IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
6.9Media

CVE-2026-53493Containerd has image-pull DoS via crafted OCI index graph amplification

containerd containerd Publicada: (hace 1 mes)

Descripción

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability. Versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1 fix the issue.

Debilidad (CWE): CWE-400CWE-770CWE-834

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
containerd containerd >= 2.0.0, < 2.0.13, < 1.7.36, >= 2.1.0, < 2.2.9, >= 2.3.0, < 2.3.6, = 2.4.0

Referencias y parches

CVE recientes del mismo producto — containerd / runc

4.6Media
CVE-2026-95838

containerd: Unpack DoS via repeated opaque whiteouts

containerd containerd

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout configurations. A malicious image layer can trigger repeated directory tr…

8.4Alta
CVE-2026-53492

containerd CRI checkpoint restore CDI annotation smuggling

containerd containerd

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. W…