A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-criuUpgrade podman-remoteUpgrade podman-dockerUpgrade skopeo-testsUpgrade libslirp-develUpgrade podman-pluginsUpgrade critUpgrade criu-develUpgrade podman-gvproxyUpgrade skopeoUpgrade toolboxUpgrade criu-libsUpgrade libslirpUpgrade podman-testsUpgrade slirp4netnsUpgrade toolbox-testsUpgrade buildah-testsUpgrade podmanUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade criu | May 4, 2022 | Apr 1, 2021 |
| Centos_linux | — | Upgrade podmanUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debugsourceUpgrade crunUpgrade crun-debugsourceUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade podman-remote-debuginfoUpgrade skopeoUpgrade buildahUpgrade skopeo-debugsourceUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade python3-podmanUpgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-testsUpgrade criu-libs-debuginfoUpgrade buildah-tests-debuginfoUpgrade criuUpgrade podman-catatonitUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade criu-develUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade critUpgrade libslirpUpgrade runcUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade python3-criuUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade podman-debuginfoUpgrade libslirp-develUpgrade container-selinuxUpgrade cockpit-podmanUpgrade udicaUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade podman-remoteUpgrade containers-commonUpgrade podman-dockerUpgrade criu-libs | Nov 10, 2021 | Apr 1, 2021 |
| Debian | — | Upgrade golang-github-containers-storage | Jul 30, 2024 | Apr 1, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade python3-criuUpgrade container-selinuxUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade podman-remoteUpgrade runcUpgrade podman-pluginsUpgrade udicaUpgrade libslirp-develUpgrade conmonUpgrade criu-develUpgrade criu-libsUpgrade critUpgrade crunUpgrade containers-commonUpgrade podman-dockerUpgrade python3-podmanUpgrade cockpit-podmanUpgrade skopeoUpgrade slirp4netnsUpgrade criuUpgrade fuse-overlayfsUpgrade podmanUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade buildah-testsUpgrade buildahUpgrade libslirpUpgrade containernetworking-plugins | Nov 22, 2022 | Apr 1, 2021 |
| Redhat Openshift | — | Upgrade python-sushy-oem-idracUpgrade openstack-ironic-python-agentUpgrade python-oslo-serializationUpgrade python-oslo-logUpgrade python-ironic-libUpgrade rteval-loadsUpgrade openvswitch2.15Upgrade runcUpgrade python-oslo-contextUpgrade coreos-installerUpgrade python-oslo-serviceUpgrade python-oslo-upgradecheckUpgrade cri-oUpgrade openstack-ironic-inspectorUpgrade cri-toolsUpgrade python-openshiftUpgrade ostreeUpgrade python-jsonschemaUpgrade openstack-ironicUpgrade console-login-helper-messagesUpgrade python-openstacksdkUpgrade python-stevedoreUpgrade python-debtcollectorUpgrade python-kubernetesUpgrade python-sushyUpgrade redhat-release-coreosUpgrade rust-afterburnUpgrade python-oslo-dbUpgrade python-ironic-prometheus-exporterUpgrade ironic-images-ipa-x86_64Upgrade atomic-openshift-service-idlerUpgrade openshift-kuryrUpgrade python-keystoneauth1Upgrade ignitionUpgrade openshiftUpgrade jenkins-2-pluginsUpgrade python-oslo-concurrencyUpgrade ironic-imagesUpgrade python-oslo-i18nUpgrade python-eventletUpgrade butaneUpgrade ovn2.13Upgrade python-oslo-configUpgrade ironic-images-ipa-ppc64leUpgrade openshift-ansibleUpgrade python-pyrsistentUpgrade openshift-clientsUpgrade python-hardwareUpgrade python-toozUpgrade python-oslo-policyUpgrade jenkinsUpgrade toolboxUpgrade podmanUpgrade kata-containersUpgrade haproxyUpgrade python-oslo-utils | Apr 21, 2021 | Apr 1, 2021 |
| Redhat_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade criu-develUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade python3-podmanUpgrade conmon-debugsourceUpgrade cockpit-podmanUpgrade runc-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-pluginsUpgrade podman-dockerUpgrade criu-debuginfoUpgrade conmon-debuginfoUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-develUpgrade toolboxUpgrade conmonUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-testsUpgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade libslirpUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade crunUpgrade criu-libs-debuginfoUpgrade critUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade runcUpgrade udicaUpgrade libslirp-debuginfoUpgrade podman-plugins-debuginfoUpgrade toolbox-testsUpgrade container-selinuxUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade podman-remoteUpgrade podman-catatonitUpgrade libslirp-debugsourceUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade skopeoUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfsUpgrade podman-debugsourceUpgrade python3-criuNo solution exists | Nov 10, 2021 | Apr 1, 2021 |
| Rocky_linux | — | Upgrade podman-catatonit-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade criu-libsUpgrade crun-debugsourceUpgrade buildah-debuginfoUpgrade conmonUpgrade podman-remote-debuginfoUpgrade libslirpUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade toolboxUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debuginfoUpgrade podman-testsUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade critUpgrade criuUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remoteUpgrade toolbox-debuginfoUpgrade skopeoUpgrade criu-develUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade crunUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade runcUpgrade podman-pluginsUpgrade toolbox-debugsourceUpgrade python3-criuUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade podmanUpgrade skopeo-debugsourceUpgrade skopeo-testsUpgrade podman-catatonitUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfo | Mar 12, 2024 | Apr 1, 2021 |
| Suse | — | Upgrade libcontainers-commonUpgrade libseccomp-develUpgrade libseccomp2-32bitUpgrade libseccomp-toolsUpgrade conmonUpgrade podman-cni-configUpgrade podmanUpgrade libseccomp2 | Mar 5, 2022 | Apr 1, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 1, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub