GO-2025-4108
containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2025-64329
- Alias
- GHSA-m6hq-p25p-ffr2
Description
containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/containerd/containerd | introduced 0, fixed 1.7.29 |
| Go · github.com/containerd/containerd/v2 | introduced 0, fixed 2.0.7, introduced 2.1.0-beta.0, fixed 2.1.5, introduced 2.2.0-beta.0, fixed 2.2.0 |
Références
- https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2 ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2025-64329 ADVISORY
- https://github.com/containerd/containerd/commit/083b53cd6f19b5de7717b0ce92c11bdf95e612df FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |