https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T08:25:19.529129+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-64329 CVE-2025-64329 — containerd CRI server: Host memory exhaustion through Attach goroutine leak 2026-09-30T08:25:20.274929+00:00

Affected: containerd

containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. To workaround this vulnerability, users can set up an admission controller to control accesses to pods/attach resources.