Affected by GO-2022-0278 and 12 other vulnerabilities

GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

The highest tagged major version is v2.

introspection

package

v1.5.0 Latest Latest Go to latest Published: May 3, 2021 License: Apache-2.0 Imports: 18 Imported by: 182

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/containerd/containerd

Links

Documentation ¶

Index ¶

type Local
type Service
- func NewIntrospectionServiceFromClient(c api.IntrospectionClient) Service

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Local ¶ added in v1.4.0

type Local struct {
	// contains filtered or unexported fields
}

Local is a local implementation of the introspection service

func (*Local) Plugins ¶ added in v1.4.0

func (l *Local) Plugins(ctx context.Context, req *api.PluginsRequest, _ ...grpc.CallOption) (*api.PluginsResponse, error)

Plugins returns the locally defined plugins

func (*Local) Server ¶ added in v1.4.0

func (l *Local) Server(ctx context.Context, _ *ptypes.Empty, _ ...grpc.CallOption) (*api.ServerResponse, error)

Server returns the local server information

func (*Local) UpdateLocal ¶ added in v1.4.0

func (l *Local) UpdateLocal(root string, plugins []api.Plugin)

UpdateLocal updates the local introspection service

type Service ¶ added in v1.4.0

type Service interface {
	Plugins(context.Context, []string) (*api.PluginsResponse, error)
	Server(context.Context, *ptypes.Empty) (*api.ServerResponse, error)
}

Service defines the instrospection service interface

func NewIntrospectionServiceFromClient ¶ added in v1.4.0

func NewIntrospectionServiceFromClient(c api.IntrospectionClient) Service

NewIntrospectionServiceFromClient creates a new introspection service from an API client

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL