CVE catalog

CVE-2022-23471

containerd: CVE-2022-23471

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.11% · Oct 25, 2026

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, for example, a faulty command, the goroutine will be stuck waiting to send without a receiver, resulting in a memory leak. Kubernetes and crictl can both be configured to use containerd's CRI implementation and the stream server is used for handling container IO. This bug has been fixed in containerd 1.6.12 and 1.5.16. Users should update to these versions to resolve the issue. Users unable to upgrade should ensure that only trusted images and commands are used and that only trusted users have permissions to execute commands in running containers.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancontainerdsid2.1.9+ds1-5fixed
Debiancontainerdforky2.1.9+ds1-5fixed
Debiancontainerdtrixie1.7.24~ds1-6+deb13u1fixed
Debiancontainerdtrixie-security1.7.24~ds1-6+deb13u1fixed
Debiancontainerdbookworm1.6.20~ds1-1+deb12u3fixed
Debiancontainerdbookworm-security1.6.20~ds1-1+deb12u2fixed
Ubuntucontainerdpro0.2.1-0ubuntu4~16.04vulnerable
Ubuntucontainerdpro0.2.3-0ubuntu1~16.04vulnerable
Ubuntucontainerdpro0.2.5-0ubuntu1~16.04.1vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.2vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.3vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.4vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.5vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.6vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.6+esm1vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.6+esm2vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.6+esm4vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.6+esm5vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.6+esm6vulnerable
Ubuntucontainerdpro1.2.6-0ubuntu1~16.04.6+esm7vulnerable
Ubuntucontainerd18.040.2.5-0ubuntu2vulnerable
Ubuntucontainerd18.041.2.6-0ubuntu1~18.04.1vulnerable
Ubuntucontainerd18.041.2.6-0ubuntu1~18.04.2vulnerable
Ubuntucontainerd18.041.3.3-0ubuntu1~18.04.1vulnerable
Ubuntucontainerd18.041.3.3-0ubuntu1~18.04.2vulnerable
Ubuntucontainerd18.041.3.3-0ubuntu1~18.04.3vulnerable
Ubuntucontainerd18.041.3.3-0ubuntu1~18.04.4vulnerable
Ubuntucontainerd18.041.4.4-0ubuntu1~18.04.2vulnerable
Ubuntucontainerd18.041.5.2-0ubuntu1~18.04.1vulnerable
Ubuntucontainerd18.041.5.2-0ubuntu1~18.04.2vulnerable
Ubuntucontainerd18.041.5.2-0ubuntu1~18.04.3vulnerable
Ubuntucontainerd18.041.5.5-0ubuntu3~18.04.1vulnerable
Ubuntucontainerd18.041.5.5-0ubuntu3~18.04.2vulnerable
Ubuntucontainerd18.041.5.9-0ubuntu1~18.04.1vulnerable
Ubuntucontainerd18.041.5.9-0ubuntu1~18.04.2fixed
Ubuntucontainerd20.041.2.10-0ubuntu1vulnerable
Ubuntucontainerd20.041.3.2-0ubuntu1vulnerable
Ubuntucontainerd20.041.3.3-0ubuntu1vulnerable
Ubuntucontainerd20.041.3.3-0ubuntu2vulnerable
Ubuntucontainerd20.041.3.3-0ubuntu2.1vulnerable
Ubuntucontainerd20.041.3.3-0ubuntu2.2vulnerable
Ubuntucontainerd20.041.3.3-0ubuntu2.3vulnerable
Ubuntucontainerd20.041.4.4-0ubuntu1~20.04.2vulnerable
Ubuntucontainerd20.041.5.2-0ubuntu1~20.04.1vulnerable
Ubuntucontainerd20.041.5.2-0ubuntu1~20.04.2vulnerable
Ubuntucontainerd20.041.5.2-0ubuntu1~20.04.3vulnerable
Ubuntucontainerd20.041.5.5-0ubuntu3~20.04.1vulnerable
Ubuntucontainerd20.041.5.5-0ubuntu3~20.04.2vulnerable
Ubuntucontainerd20.041.5.9-0ubuntu1~20.04.1vulnerable
Ubuntucontainerd20.041.5.9-0ubuntu1~20.04.4vulnerable
Ubuntucontainerd20.041.5.9-0ubuntu1~20.04.5vulnerable
Ubuntucontainerd20.041.5.9-0ubuntu1~20.04.6fixed
Ubuntucontainerd22.041.5.5-0ubuntu3vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu1vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu2vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu3vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu3.1fixed
Ubuntucontainerd18.040.2.5-0ubuntu2vulnerable
Ubuntucontainerd18.041.2.6-0ubuntu1~18.04.1vulnerable
Ubuntucontainerd18.041.2.6-0ubuntu1~18.04.2vulnerable
Ubuntucontainerd18.041.3.3-0ubuntu1~18.04.1vulnerable
Ubuntucontainerd18.041.3.3-0ubuntu1~18.04.2vulnerable
Ubuntucontainerd18.041.3.3-0ubuntu1~18.04.3vulnerable
Ubuntucontainerd18.041.3.3-0ubuntu1~18.04.4vulnerable
Ubuntucontainerd18.041.4.4-0ubuntu1~18.04.2vulnerable
Ubuntucontainerd18.041.5.2-0ubuntu1~18.04.1vulnerable
Ubuntucontainerd18.041.5.2-0ubuntu1~18.04.2vulnerable
Ubuntucontainerd18.041.5.2-0ubuntu1~18.04.3vulnerable
Ubuntucontainerd18.041.5.5-0ubuntu3~18.04.1vulnerable
Ubuntucontainerd18.041.5.5-0ubuntu3~18.04.2vulnerable
Ubuntucontainerd18.041.5.9-0ubuntu1~18.04.1vulnerable
Ubuntucontainerd18.041.5.9-0ubuntu1~18.04.2fixed
Ubuntucontainerd20.041.2.10-0ubuntu1vulnerable
Ubuntucontainerd20.041.3.2-0ubuntu1vulnerable
Ubuntucontainerd20.041.3.3-0ubuntu1vulnerable
Ubuntucontainerd20.041.3.3-0ubuntu2vulnerable
Ubuntucontainerd20.041.3.3-0ubuntu2.1vulnerable
Ubuntucontainerd20.041.3.3-0ubuntu2.2vulnerable
Ubuntucontainerd20.041.3.3-0ubuntu2.3vulnerable
Ubuntucontainerd20.041.4.4-0ubuntu1~20.04.2vulnerable
Ubuntucontainerd20.041.5.2-0ubuntu1~20.04.1vulnerable
Ubuntucontainerd20.041.5.2-0ubuntu1~20.04.2vulnerable
Ubuntucontainerd20.041.5.2-0ubuntu1~20.04.3vulnerable
Ubuntucontainerd20.041.5.5-0ubuntu3~20.04.1vulnerable
Ubuntucontainerd20.041.5.5-0ubuntu3~20.04.2vulnerable
Ubuntucontainerd20.041.5.9-0ubuntu1~20.04.1vulnerable
Ubuntucontainerd20.041.5.9-0ubuntu1~20.04.4vulnerable
Ubuntucontainerd20.041.5.9-0ubuntu1~20.04.5vulnerable
Ubuntucontainerd20.041.5.9-0ubuntu1~20.04.6fixed
Ubuntucontainerd22.041.5.5-0ubuntu3vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu1vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu2vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu3vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu3.1fixed
Susecontainerdlinux enterprise micro 5.31.6.16-150000.82.2fixed
Susecontainerdlinux enterprise module for containers 15 sp41.6.16-150000.82.2fixed
Susecontainerdlinux enterprise high performance computing 15 sp1-ltss1.6.16-150000.82.2fixed
Susecontainerdlinux enterprise high performance computing 15 sp2-ltss1.6.16-150000.82.2fixed
Susecontainerdlinux enterprise high performance computing 15 sp3-espos1.6.16-150000.82.2fixed
Susecontainerdlinux enterprise high performance computing 15 sp3-ltss1.6.16-150000.82.2fixed
Susecontainerdlinux enterprise server 15 sp1-ltss1.6.16-150000.82.2fixed
Susecontainerdlinux enterprise server 15 sp2-ltss1.6.16-150000.82.2fixed
Susecontainerdlinux enterprise server 15 sp3-ltss1.6.16-150000.82.2fixed
Susecontainerdlinux enterprise server for sap applications 15 sp11.6.16-150000.82.2fixed
Susecontainerdlinux enterprise server for sap applications 15 sp21.6.16-150000.82.2fixed
Susecontainerdlinux enterprise server for sap applications 15 sp31.6.16-150000.82.2fixed
Susecontainerdlinux enterprise micro 5.11.6.16-150000.82.2fixed
Susecontainerdlinux enterprise micro 5.21.6.16-150000.82.2fixed
Susecontainerdenterprise storage 71.6.16-150000.82.2fixed
Susecontainerdenterprise storage 7.11.6.16-150000.82.2fixed
Opensusecontainerdleap micro 5.31.6.16-150000.82.2fixed
Opensusecontainerdleap 15.41.6.16-150000.82.2fixed
Opensusecontainerdtumbleweed1.6.12-1.1fixed
Susecontainerdlinux enterprise micro 5.31.6.12-150000.79.1fixed
Susecontainerdlinux enterprise module for containers 15 sp31.6.12-150000.79.1fixed
Susecontainerdlinux enterprise module for containers 15 sp41.6.12-150000.79.1fixed
Susecontainerdlinux enterprise module for package hub 15 sp31.6.12-150000.79.1fixed
Susecontainerdlinux enterprise high performance computing 15-espos1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise high performance computing 15-ltss1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise high performance computing 15 sp1-espos1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise high performance computing 15 sp1-ltss1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise high performance computing 15 sp2-espos1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise high performance computing 15 sp2-ltss1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise server 15-ltss1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise server 15 sp1-bcl1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise server 15 sp1-ltss1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise server 15 sp2-bcl1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise server 15 sp2-ltss1.6.12-150000.79.1fixed
Susecontainerdlinux enterprise server for sap applications 151.6.12-150000.79.1fixed
Susecontainerdlinux enterprise server for sap applications 15 sp11.6.12-150000.79.1fixed
Susecontainerdlinux enterprise server for sap applications 15 sp21.6.12-150000.79.1fixed
Susecontainerdmanager proxy 4.11.6.12-150000.79.1fixed
Susecontainerdmanager retail branch server 4.11.6.12-150000.79.1fixed
Susecontainerdmanager server 4.11.6.12-150000.79.1fixed
Susecontainerdlinux enterprise micro 5.11.6.12-150000.79.1fixed
Susecontainerdlinux enterprise micro 5.21.6.12-150000.79.1fixed
Susecontainerdenterprise storage 61.6.12-150000.79.1fixed
Susecontainerdenterprise storage 71.6.12-150000.79.1fixed
Opensusecontainerdleap micro 5.21.6.12-150000.79.1fixed
Opensusecontainerdleap micro 5.31.6.12-150000.79.1fixed
Opensusecontainerdleap 15.31.6.12-150000.79.1fixed
Opensusecontainerdleap 15.41.6.12-150000.79.1fixed
Susecontainerdlinux enterprise module for containers 121.6.16-16.71.1fixed
Susecontainerdlinux enterprise module for containers 121.6.12-16.68.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancontainerdsourcesid1.6.12~ds1-1not yet assignedNot reportedNot reported
Debiancontainerdsourceforky1.6.12~ds1-1not yet assignedNot reportedNot reported
Debiancontainerdsourcetrixie1.6.12~ds1-1not yet assignedNot reportedNot reported
Debiancontainerdsourcebookworm1.6.12~ds1-1not yet assignedNot reportedNot reported
Ubuntucontainerddeb18.041.5.9-0ubuntu1~18.04.2Not reportedUBUNTU-CVE-2022-23471Not reported
Ubuntucontainerddeb20.041.5.9-0ubuntu1~20.04.6Not reportedUBUNTU-CVE-2022-23471Not reported
Ubuntucontainerddeb22.041.5.9-0ubuntu3.1Not reportedUBUNTU-CVE-2022-23471Not reported
Ubuntucontainerddeb18.041.5.9-0ubuntu1~18.04.2Not reportedUSN-5776-1Not reported
Ubuntucontainerddeb20.041.5.9-0ubuntu1~20.04.6Not reportedUSN-5776-1Not reported
Ubuntucontainerddeb22.041.5.9-0ubuntu3.1Not reportedUSN-5776-1Not reported
Susecontainerdrpmlinux enterprise micro 5.31.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise module for containers 15 sp41.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp1-ltss1.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp2-ltss1.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp3-espos1.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp3-ltss1.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp1-ltss1.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp2-ltss1.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp3-ltss1.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 15 sp11.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 15 sp21.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 15 sp31.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise micro 5.11.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmlinux enterprise micro 5.21.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmenterprise storage 71.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Susecontainerdrpmenterprise storage 7.11.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Opensusecontainerdrpmleap micro 5.31.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Opensusecontainerdrpmleap 15.41.6.16-150000.82.2Not reportedSUSE-SU-2023:1628-1Not reported
Opensusecontainerdrpmtumbleweed1.6.12-1.1Not reportedOPENSUSE-SU-2024:12558-1Not reported
Susecontainerdrpmlinux enterprise micro 5.31.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise module for containers 15 sp31.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise module for containers 15 sp41.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise module for package hub 15 sp31.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15-espos1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15-ltss1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp1-espos1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp1-ltss1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp2-espos1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp2-ltss1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise server 15-ltss1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp1-bcl1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp1-ltss1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp2-bcl1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp2-ltss1.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 151.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 15 sp11.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 15 sp21.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmmanager proxy 4.11.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmmanager retail branch server 4.11.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmmanager server 4.11.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise micro 5.11.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise micro 5.21.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmenterprise storage 61.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmenterprise storage 71.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Opensusecontainerdrpmleap micro 5.21.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Opensusecontainerdrpmleap micro 5.31.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Opensusecontainerdrpmleap 15.31.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Opensusecontainerdrpmleap 15.41.6.12-150000.79.1Not reportedSUSE-SU-2022:4463-1Not reported
Susecontainerdrpmlinux enterprise module for containers 121.6.16-16.71.1Not reportedSUSE-SU-2023:1566-1Not reported
Susecontainerdrpmlinux enterprise module for containers 121.6.12-16.68.1Not reportedSUSE-SU-2022:4409-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [containerd]Unknown
    Details (4)
    • 1.6.20~ds1-1+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 1.6.12~ds1-1

      dsa · containerd · debian · bookworm

    • 1.6.20~ds1-1+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 1.6.12~ds1-1

      dsa · containerd · debian · bookworm

    • 1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1.6.12~ds1-1

      dsa · containerd · debian · bookworm

    • 1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1.6.12~ds1-1

      dsa · containerd · debian · bookworm

  • Source package: [containerd]

    Details (4)
    • 1.6.20~ds1-1+deb12u3 · all · bookworm

      Fixed · Fixed: 1.6.12~ds1-1

      dsa · containerd · debian · bookworm

    • 1.6.20~ds1-1+deb12u3 · all · bookworm

      Fixed · Fixed: 1.6.12~ds1-1

      dsa · containerd · debian · bookworm

    • 1.6.20~ds1-1+deb12u2 · all · bookworm-security

      Fixed · Fixed: 1.6.12~ds1-1

      dsa · containerd · debian · bookworm

    • 1.6.20~ds1-1+deb12u2 · all · bookworm-security

      Fixed · Fixed: 1.6.12~ds1-1

      dsa · containerd · debian · bookworm

[openSUSE Tumbleweed]

  • [containerd]Unknown

    Source package: [containerd]

    Details (1)
    • 1.7.33-1.3 · x86_64 · tumbleweed

      Fixed · Fixed: 1.6.12-1.1

      dsa · containerd · opensuse · tumbleweed

  • Source package: [containerd]

    Details (1)
    • 1.7.33-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.12-1.1

      Version impact unknown

      dsa · containerd · opensuse · tumbleweed

  • Source package: [containerd]

    Details (1)
    • 1.7.33-1.3 · noarch · tumbleweed

      Unknown · Fixed: 1.6.12-1.1

      Version impact unknown

      dsa · containerd · opensuse · tumbleweed

Observed:

References