2 CVEs categorized as CWE-400 — Uncontrolled Resource Consumption (DoS) in containerd.
CVE-2022-31030MEDIUM2022
containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the `ExecSync` API. This can cause containerd to consume all available memory …
CVE-2022-23471MEDIUM2022
containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, for …