Medium · 5.3 CVE-2021-23218 EUVD-2021-10321GHSA-3v69-r3x2-qgp5

Memory Leak in Mirantis Container Runtime (MCR) running in FIPS mode causes a Denial of Service

Published Jan 10, 2022 · Updated Aug 3, 2024 · Assigned by Mirantis

Vendor: Mirantis Product: Mirantis Container Runtime

Description

When running with FIPS mode enabled, Mirantis Container Runtime 20.10.8 leaks memory during TLS Handshakes which could be abused to cause a denial of service.

Affected products

Vendor	Product	Affected	Fixed
Mirantis	Mirantis Container Runtime	20.10.8	—

References

https://github.com/Mirantis/security/blob/main/advisories/0002.md