Affected by GO-2022-0278
and 9 other vulnerabilities
GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd
GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd
GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd
GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd
GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd
GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd
GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd
GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd
GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd
GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd
The highest tagged major version is
v2.
package
Version:
v1.5.0
Opens a new window with list of versions in this module.
Published: May 3, 2021
License: Apache-2.0
Opens a new window with license information.
Imports: 7
Opens a new window with list of imports.
Imported by: 4
Opens a new window with list of known importers.
Documentation
¶
-
func CreateListener(endpoint string) (net.Listener, error)
-
func GetAddressAndDialer(endpoint string) (string, func(ctx context.Context, addr string) (net.Conn, error), error)
-
func GetBootTime() (time.Time, error)
-
func LocalEndpoint(path, file string) (string, error)
-
func LockAndCheckSubPath(volumePath, subPath string) ([]uintptr, error)
-
func UnlockPath(fileHandles []uintptr)
CreateListener creates a listener on the specified endpoint.
GetAddressAndDialer returns the address parsed from the given endpoint and a context dialer.
GetBootTime empty implementation
LocalEndpoint empty implementation
LockAndCheckSubPath empty implementation
func UnlockPath(fileHandles []uintptr)
UnlockPath empty implementation
Source Files
¶
Click to show internal directories.
Click to hide internal directories.