Skip to content
OpenAdvisories
Medium DSA-5162-1 2 CVEs

containerd - security update

Published Jun 12, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 containerd 1.4.13~ds1-1~deb11u2

Vulnerabilities 2

  • Medium 5.9
    CVE-2022-24769

    Default inheritable capabilities for linux container should be empty

    Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version 20.10.14 where containers were incorrectly started with non-empty inheritable Linux process capabilit…

    moby moby ctop docker-machine-driver-harvester Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 5.5
    CVE-2022-31030

    containerd CRI plugin: Host memory exhaustion through ExecSync

    containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the `ExecSync` API. This can cause co…

    containerd containerd ctop containerd Debian Ubuntu Azure Linux Alpine Wolfi Go