x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-7ww5-4wqc-m92c #2412

GoVulnBot · 2023-12-19T22:01:18Z

In GitHub Security Advisory GHSA-7ww5-4wqc-m92c, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/containerd/containerd	1.7.11	>= 1.7.0, <= 1.7.10

Cross references:

Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: CVE-2021-43816 #278 EFFECTIVELY_PRIVATE
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: CVE-2022-23648 #344 EFFECTIVELY_PRIVATE
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-5j5w-g665-5m35 #360 EFFECTIVELY_PRIVATE
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: CVE-2022-31030 #482 EFFECTIVELY_PRIVATE
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd/cmd: GHSA-36xw-fx78-c5r4 #784 NOT_IMPORTABLE
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-742w-89gc-8m9c #803 NOT_IMPORTABLE
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: CVE-2021-32760, GHSA-c72p-9xmj-rx3w #921 NOT_IMPORTABLE
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: CVE-2021-41103, GHSA-c2h3-6mxw-7mvq #938 NOT_IMPORTABLE
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: CVE-2022-23471 #1147 EFFECTIVELY_PRIVATE
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: CVE-2021-21334 #2321 LEGACY_FALSE_POSITIVE
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-259w-8hf6-59c2 #1573
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-259w-8hf6-59c2 #1573
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-hmfx-3pcx-653p #1574
Module github.com/containerd/containerd appears in issue x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-hmfx-3pcx-653p #1574

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/containerd/containerd
      versions:
        - introduced: TODO (earliest fixed "1.7.11", vuln range ">= 1.7.0, <= 1.7.10")
      packages:
        - package: github.com/containerd/containerd
    - module: github.com/containerd/containerd
      versions:
        - introduced: TODO (earliest fixed "1.6.26", vuln range "<= 1.6.25")
      packages:
        - package: github.com/containerd/containerd
summary: containerd allows RAPL to be accessible to a container
ghsas:
    - GHSA-7ww5-4wqc-m92c
references:
    - advisory: https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c
    - fix: https://github.com/containerd/containerd/commit/67d356cb3095f3e8f8ad7d36f9a733fea1e7e28c
    - fix: https://github.com/containerd/containerd/commit/746b910f05855c8bfdb4415a1c0f958b234910e5
    - advisory: https://github.com/advisories/GHSA-7ww5-4wqc-m92c

The text was updated successfully, but these errors were encountered:

jba · 2023-12-26T20:59:06Z

One of the vulnerable packages, contrib/apparmor, is used in several main programs. To mention two examples, github.com/github.com/devx/boss and github.com/stellarproject/orbit both vendor the containerd repo, including the above package.

gopherbot · 2023-12-26T22:00:38Z

Change https://go.dev/cl/552855 mentions this issue: data/reports: add GO-2023-2412.yaml

jba self-assigned this Dec 21, 2023

jba added the NeedsReport label Dec 26, 2023

gopherbot closed this as completed in 7e496d5 Jan 2, 2024

GoVulnBot mentioned this issue Feb 1, 2024

x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-6g2q-w5j3-fwh4 #2503

Closed

GoVulnBot mentioned this issue May 14, 2024

x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-c9cp-9c75-9v8c #2846

Closed

This was referenced Mar 17, 2025

x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-265r-hfxg-fhmg #3528

Closed

x/vulndb: potential Go vuln in github.com/containerd/containerd: CVE-2024-40635 #3531

Closed

This was referenced May 20, 2025

x/vulndb: potential Go vuln in github.com/containerd/containerd: CVE-2025-47290 #3699

Closed

x/vulndb: potential Go vuln in github.com/containerd/containerd: CVE-2025-47291 #3701

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-7ww5-4wqc-m92c #2412

x/vulndb: potential Go vuln in github.com/containerd/containerd: GHSA-7ww5-4wqc-m92c #2412

Uh oh!

Uh oh!