Skip to content
OpenAdvisories
High DLA-4467-1 2 CVEs

containerd - security update

Published Feb 5, 2026 · Updated Feb 5, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 containerd 1.4.13~ds1-1~deb11u6

Vulnerabilities 2

  • High 7.3
    CVE-2024-25621

    containerd affected by a local privilege escalation via wide permissions on CRI directory

    containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containe…

    containerd containerd zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.9
    CVE-2025-64329

    containerd CRI server: Host memory exhaustion through Attach goroutine leak

    containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host d…

    containerd containerd zot kubescape Debian Ubuntu Azure Linux Wolfi Go