Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

containerd — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in containerd, with AI-generated Chinese analysis, references, and POCs.

Vendor: containerd

CVE IDTitleCVSSSeverityPublished
CVE-2025-64329 containerd CRI server: Host memory exhaustion through Attach goroutine leak CWE-401 7.7 -2025-11-07
CVE-2024-25621 containerd affected by a local privilege escalation via wide permissions on CRI directory CWE-279 7.3 High2025-11-06
CVE-2025-47291 containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. CWE-266 7.7AIHighAI2025-05-21
CVE-2025-47290 Containerd vulnerable to host filesystem access during image unpack CWE-367 6.3AIMediumAI2025-05-20
CVE-2024-40635 containerd has an integer overflow in User ID handling CWE-190 4.6 Medium2025-03-17
CVE-2023-25173 containerd supplementary groups are not set up properly CWE-863 5.3 Medium2023-02-16
CVE-2023-25153 containerd OCI image importer memory exhaustion CWE-770 6.2 Medium2023-02-16
CVE-2022-23471 containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak CWE-400 5.7 Medium2022-12-07
CVE-2022-31030 containerd CRI plugin: Host memory exhaustion through ExecSync CWE-400 5.5 Medium2022-06-06
CVE-2022-23648 Insecure handling of image volumes in containerd CRI plugin CWE-200 7.5 High2022-03-03
CVE-2021-43816 Improper Preservation of Permissions in containerd CWE-281 8.0 High2022-01-05
CVE-2021-41103 Insufficiently restricted permissions on plugin directories CWE-22 7.8 -2021-10-04
CVE-2021-32760 Archive package allows chmod of file outside of unpack target directory CWE-668 5.0 Medium2021-07-19
CVE-2021-21334 environment variable leak CWE-668 6.3 Medium2021-03-10
CVE-2020-15257 containerd-shim API Exposed to Host Network Containers CWE-669 5.2 Medium2020-12-01
CVE-2020-15157 containerd can be coerced into leaking credentials during image pull CWE-522 6.1 Medium2020-10-16

All 16 known CVE vulnerabilities affecting containerd with full Chinese analysis, references, and POCs where available.