[CVE-2026-95838 ] Published: Oct 12, 2026, 7:53:24 PM UTC
containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout configurations
Medium(4.6) Affected Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
[CVE-2026-95837 ] Published: Oct 12, 2026, 7:37:49 PM UTC
containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from ch
High(7.8) Affected Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
[CVE-2026-53493 ] Published: Sep 25, 2026, 12:06:43 AM UTC
containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before conta
Medium(6.9) Affected Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
[CVE-2026-53495 ] Published: Sep 9, 2026, 6:01:33 PM UTC
containerd: CVE-2026-53495
Medium(6.8) Affected Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Affected
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Affected
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Affected
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Affected
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
[CVE-2026-53488 ] Published: Jun 18, 2026, 10:00:00 PM UTC
containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to
Critical(9.4) Affected Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
[CVE-2026-46680 ] Published: Jun 17, 2026, 12:00:00 AM UTC
containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are inc
High(7.8) Affected Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
[CVE-2026-47262 ] Published: Jun 12, 2026, 9:36:51 PM UTC
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (
Medium(6.5) Affected Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Affected
nvd · containerd · debian · bookworm; nvd · containerd · debian · 12
[CVE-2025-64329 ] Published: Nov 7, 2025, 4:15:09 AM UTC
containerd vulnerabilities
Medium(6.5) Affected Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.6.20~ds1-1+deb12u3
usn · containerd · debian · bookworm; usn · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.6.20~ds1-1+deb12u3
usn · containerd · debian · bookworm; usn · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Affected · Fixed: 1.6.20~ds1-1+deb12u3
usn · containerd · debian · bookworm; usn · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Affected · Fixed: 1.6.20~ds1-1+deb12u3
usn · containerd · debian · bookworm; usn · containerd · debian · 12
[CVE-2024-25621 ] Published: Jan 1, 2024, 12:00:00 AM UTC
containerd vulnerabilities
High(7.7) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 24, 2026, 4:53:06 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.6.20~ds1-1+deb12u2
usn · containerd · debian · bookworm; usn · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.6.20~ds1-1+deb12u2
usn · containerd · debian · bookworm; usn · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.6.20~ds1-1+deb12u2
usn · containerd · debian · bookworm; usn · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.6.20~ds1-1+deb12u2
usn · containerd · debian · bookworm; usn · containerd · debian · 12
[CVE-2024-40635 ] Published: Jan 1, 2024, 12:00:00 AM UTC
containerd vulnerability
Medium(4.6) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 24, 2026, 11:27:14 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.6.20~ds1-1+deb12u2
usn · containerd · debian · bookworm; usn · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.6.20~ds1-1+deb12u2
usn · containerd · debian · bookworm; usn · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.6.20~ds1-1+deb12u2
usn · containerd · debian · bookworm; usn · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.6.20~ds1-1+deb12u2
usn · containerd · debian · bookworm; usn · containerd · debian · 12
[CVE-2022-23471 ] Published: Dec 8, 2022, 12:00:00 AM UTC
containerd: CVE-2022-23471
Medium(6.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:24:40 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.6.12~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.6.12~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.6.12~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.6.12~ds1-1
dsa · containerd · debian · bookworm
[CVE-2022-31030 ] Published: Jun 6, 2022, 5:00:00 PM UTC
containerd: CVE-2022-31030
Medium(5.7) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:26:51 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.6.6~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.6.6~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.6.6~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.6.6~ds1-1
dsa · containerd · debian · bookworm
[CVE-2022-24769 ] Published: Mar 23, 2022, 12:00:00 AM UTC
containerd: CVE-2022-24769
Medium(5.9) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:24:47 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.6.2~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.6.2~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.6.2~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.6.2~ds1-1
dsa · containerd · debian · bookworm
[CVE-2022-23648 ] Published: Mar 2, 2022, 12:00:00 AM UTC
containerd: CVE-2022-23648
High(7.4) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:24:41 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.6.1~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.6.1~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.6.1~ds1-1
dsa · containerd · debian · bookworm
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.6.1~ds1-1
dsa · containerd · debian · bookworm
[CVE-2021-41103 ] Published: Oct 4, 2021, 12:00:00 AM UTC
containerd: CVE-2021-41103
Medium(5.9) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:02:40 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.5.7~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.5.7~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.5.7~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.5.7~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
[CVE-2021-32760 ] Published: Jul 19, 2021, 12:00:00 AM UTC
containerd: CVE-2021-32760
Medium(5.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:57:35 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.4.5~ds1-2
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.4.5~ds1-2
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.4.5~ds1-2
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.4.5~ds1-2
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
[CVE-2021-21334 ] Published: Mar 5, 2021, 12:00:00 AM UTC
containerd: CVE-2021-21334
Medium(6.3) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:54:33 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.4.4~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.4.4~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.4.4~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.4.4~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
[CVE-2021-43816 ] Published: Jan 1, 2021, 12:00:00 AM UTC
containerd: CVE-2021-43816
High(8) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:03:29 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.5.9~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.5.9~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.5.9~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.5.9~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
[CVE-2020-15257 ] Published: Nov 30, 2020, 12:00:00 AM UTC
containerd: CVE-2020-15257
High(8.8) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:48:13 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.4.3~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.4.3~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.4.3~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.4.3~ds1-1
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
[CVE-2020-15157 ] Published: Oct 15, 2020, 12:00:00 AM UTC
containerd: CVE-2020-15157
Medium(6.1) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:48:13 PM UTC
Details (4) 1.6.20~ds1-1+deb12u3 · amd64 · bookworm
Fixed · Fixed: 1.3.2~ds1-2
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u3 · arm64 · bookworm
Fixed · Fixed: 1.3.2~ds1-2
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security
Fixed · Fixed: 1.3.2~ds1-2
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12
1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security
Fixed · Fixed: 1.3.2~ds1-2
dsa · containerd · debian · bookworm; dsa · containerd · debian · 12