containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the `ExecSync` API. This can cause containerd to consume all available memory on the computer, denying service to other legitimate workloads. Kubernetes and crictl can both be configured to use containerd's CRI implementation; `ExecSync` may be used when running probes or when executing processes via an "exec" facility. This bug has been fixed in containerd 1.6.6 and 1.5.13. Users should update to these versions to resolve the issue. Users unable to upgrade should ensure that only trusted images and commands are used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade containerd | Aug 22, 2024 | Jun 6, 2022 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade containerd-debuginfoUpgrade ecs-initUpgrade containerd-stressUpgrade runcUpgrade dockerUpgrade docker-debuginfoUpgrade runc-debuginfo | Jul 4, 2022 | Jun 9, 2022 |
| Amazon_linux | — | Upgrade containerd | May 13, 2025 | Jun 9, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 6, 2022 |
| Debian | — | Upgrade containerd | Nov 7, 2022 | Jun 9, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Gentoo Linux | — | Upgrade app-containers/containerd. | Feb 1, 2024 | Jun 9, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine | Oct 11, 2022 | Jun 9, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-engine | Mar 8, 2023 | Jun 9, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade docker-engine | Jun 9, 2023 | Jun 9, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine | Jun 9, 2023 | Jun 9, 2022 |
| Suse | — | Upgrade docker-bash-completionUpgrade docker-kubic-kubeadm-criconfigUpgrade docker-kubic-fish-completionUpgrade docker-fish-completionUpgrade docker-zsh-completionUpgrade containerdUpgrade containerd-ctrUpgrade containerd-develUpgrade dockerUpgrade runcUpgrade docker-kubic-zsh-completionUpgrade docker-kubicUpgrade docker-kubic-bash-completion | Oct 26, 2022 | Jun 9, 2022 |
| Ubuntu | — | Upgrade containerdUpgrade containerd (Ubuntu Pro) | Dec 13, 2022 | Jun 9, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 6, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub