https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:53:54.343074+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-07471 bdu:2022-07471 2026-10-03T15:53:54.515082+00:00 bdu:2022-07471 https://cve.radiocsirt.org/vuln/bell-cve-2022-23471 Withdrawn: BELL-CVE-2022-23471 — CVE-2022-23471 does not affect BellSoft software 2026-10-03T15:53:54.515124+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-0119 certfr-2024-avi-0119 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Siemens</span>. Certaines d'entr… 2026-10-03T15:53:54.515152+00:00 certfr-2024-avi-0119 https://cve.radiocsirt.org/vuln/cleanstart-2025-sx71346 CLEANSTART-2025-SX71346 — containerd is an open source container runtime 2026-10-03T15:53:54.515178+00:00

Affected: CleanStart: containerd

Security vulnerability affects the containerd package. containerd is an open source container runtime.

 https://cve.radiocsirt.org/vuln/euvd-2026-233356 EUVD-2026-233356 2026-10-03T15:53:54.515232+00:00 EUVD-2026-233356 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23471 fkie_cve-2022-23471 2026-10-03T15:53:54.515250+00:00

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, for example, a faulty command, the goroutine will be stuck waiting to send without a receiver, resulting in a memory leak. Kubernetes and crictl can both be configured to use containerd's CRI implementation and the stream server is used for handling container IO. This bug has been fixed in containerd 1.6.12 and 1.5.16. Users should update to these versions to resolve the issue. Users unable to upgrade should ensure that only trusted images and commands are used and that only trusted users have permissions to execute commands in running containers.

 https://cve.radiocsirt.org/vuln/ghsa-2qjp-425j-52j9 GHSA-2qjp-425j-52j9 — containerd CRI stream server vulnerable to host memory exhaustion via terminal 2026-10-03T15:53:54.515279+00:00

Affected: Go: github.com/containerd/containerd

### Impact

A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, for example, a faulty command, the goroutine will be stuck waiting to send without a receiver, resulting in a memory leak. Kubernetes and crictl can both be configured to use containerd's CRI implementation and the stream server is used for handling container IO.

### Patches

This bug has been fixed in containerd 1.6.12 and 1.5.16. Users should update to these versions to resolve the issue.

### Workarounds

Ensure that only trusted images and commands are used and that only trusted users have permissions to execute commands in running containers.

### For more information

If you have any questions or comments about this advisory:

* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose) * Email us at [security@containerd.io](mailto:security@containerd.io)

To report a security issue in containerd: * [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new) * Email us at [security@containerd.io](mailto:security@containerd.io)

 https://cve.radiocsirt.org/vuln/gsd-2022-23471 gsd-2022-23471 2026-10-03T15:53:54.515317+00:00 gsd-2022-23471 https://cve.radiocsirt.org/vuln/icsa-24-046-11 ICSA-24-046-11 — Siemens SCALANCE XCM-/XRM-300 2026-10-03T15:53:54.515329+00:00

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.

This issue affects Apache HTTP Server 2.4.54 and earlier. A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability. A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability. An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service. A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create…

 https://cve.radiocsirt.org/vuln/msrc_cve-2022-23471 msrc_CVE-2022-23471 — containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak 2026-10-03T15:53:54.515739+00:00 msrc_CVE-2022-23471 https://cve.radiocsirt.org/vuln/oesa-2022-2143 OESA-2022-2143 — containerd security update 2026-10-03T15:53:54.515756+00:00

Affected: openEuler:20.03-LTS-SP1: containerd, openEuler:20.03-LTS-SP3: containerd, openEuler:22.03-LTS: containerd

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc. Security Fix(es): containerd is an open source container runtime. A bug was found in containerd&apos;s CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user&apos;s process fails to launch due to, for example, a faulty command, the goroutine will be stuck waiting to send without a receiver, resulting in a memory leak. Kubernetes and crictl can both be configured to use containerd&apos;s CRI implementation and the stream server is used for handling container IO. This bug has been fixed in containerd 1.6.12 and 1.5.16. Users should update to these versions to resolve the issue. Users unable to upgrade should ensure that only trusted images and commands are used and that only trusted users have permissions to execute commands in running containers.(CVE-2022-23471)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12558-1 openSUSE-SU-2024:12558-1 — containerd-1.6.12-1.1 on GA media 2026-10-03T15:53:54.515788+00:00

containerd-1.6.12-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:4409-1 SUSE-SU-2022:4409-1 — Security update for containerd 2026-10-03T15:53:54.515803+00:00

Security update for containerd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23471 UBUNTU-CVE-2022-23471 2026-10-03T15:53:54.515817+00:00

Affected: Ubuntu:Pro:16.04:LTS: containerd, Ubuntu:18.04:LTS: containerd, Ubuntu:20.04:LTS: containerd, Ubuntu:22.04:LTS: containerd

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, for example, a faulty command, the goroutine will be stuck waiting to send without a receiver, resulting in a memory leak. Kubernetes and crictl can both be configured to use containerd's CRI implementation and the stream server is used for handling container IO. This bug has been fixed in containerd 1.6.12 and 1.5.16. Users should update to these versions to resolve the issue. Users unable to upgrade should ensure that only trusted images and commands are used and that only trusted users have permissions to execute commands in running containers.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3146 WID-SEC-W-2023-3146 — IBM MQ Operator and Queue manager: Mehrere Schwachstellen 2026-10-03T15:53:54.515844+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM MQ Operator and Queue manager ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.