proc

Oct 15, 2020 GO-2022-0344 +13 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Feb 18, 2020 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Feb 4, 2020 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Changes in this version

+ const StoppedPID — darwin/amd64, js/wasm, linux/amd64

Nov 26, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Sep 26, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Sep 6, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Aug 22, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Jun 14, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Apr 5, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Mar 13, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Feb 14, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Feb 6, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Jan 8, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Dec 5, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Changes in this version

type Init — darwin/amd64, js/wasm, linux/amd64

+ func (p *Init) Checkpoint(ctx context.Context, r *CheckpointConfig) error

+ func (p *Init) Delete(ctx context.Context) error

+ func (p *Init) Exec(ctx context.Context, path string, r *ExecConfig) (proc.Process, error)

+ func (p *Init) Kill(ctx context.Context, signal uint32, all bool) error

+ func (p *Init) Pause(ctx context.Context) error

+ func (p *Init) Resize(ws console.WinSize) error

+ func (p *Init) Resume(ctx context.Context) error

+ func (p *Init) SetExited(status int)

+ func (p *Init) Start(ctx context.Context) error

+ func (p *Init) Update(ctx context.Context, r *google_protobuf.Any) error

Nov 21, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Oct 24, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Changes in this version

+ const InitPidFile — darwin/amd64, js/wasm, linux/amd64

+ const RuncRoot — darwin/amd64, js/wasm, linux/amd64

+ func NewRunc(root, path, namespace, runtime, criu string, systemd bool) *runc.Runc — darwin/amd64, js/wasm, linux/amd64

+ type CheckpointConfig struct

+ AllowExternalUnixSockets bool

+ AllowOpenTCP bool

+ AllowTerminal bool

+ EmptyNamespaces []string

+ Exit bool

+ FileLocks bool

+ Path string

+ type CreateConfig struct

+ Bundle string

+ Checkpoint string

+ ID string

+ Options *google_protobuf.Any

+ ParentCheckpoint string

+ Rootfs []Mount

+ Runtime string

+ Stderr string

+ Stdin string

+ Stdout string

+ Terminal bool

+ type ExecConfig struct

+ ID string

+ Spec *google_protobuf.Any

+ Stderr string

+ Stdin string

+ Stdout string

+ Terminal bool

+ type Init struct — darwin/amd64, js/wasm, linux/amd64

+ Bundle string

+ IoGID int

+ IoUID int

+ NoNewKeyring bool

+ NoPivotRoot bool

+ Platform proc.Platform

+ Rootfs string

+ WorkDir string

+ func New(id string, runtime *runc.Runc, stdio proc.Stdio) *Init

+ func (p *Init) Create(ctx context.Context, r *CreateConfig) error

+ func (p *Init) ExitStatus() int

+ func (p *Init) ExitedAt() time.Time

+ func (p *Init) ID() string

+ func (p *Init) KillAll(context context.Context) error

+ func (p *Init) Pid() int

+ func (p *Init) Runtime() *runc.Runc

+ func (p *Init) Status(ctx context.Context) (string, error)

+ func (p *Init) Stdin() io.Closer

+ func (p *Init) Stdio() proc.Stdio

+ func (p *Init) Wait()

+ type Mount struct

+ Options []string

+ Source string

+ Target string

+ Type string

Oct 16, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Oct 3, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Sep 20, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Aug 28, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Aug 23, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Aug 16, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd