UpHeron
All vulnerabilities

Servers and applications

CVE-2022-31030

containerd CRI plugin: Host memory exhaustion through ExecSync

Severity
Medium 5.5
Published
6 Jun 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.5.13, 1.6.6
Also known as
GHSA-5ffw-gxpp-mxpf
Sources
NVD, Project advisories (GitHub)

Description

containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the `ExecSync` API. This can cause containerd to consume all available memory on the computer, denying service to other legitimate workloads. Kubernetes and crictl can both be…

Affected software

SoftwareAffected versions
containerdServers and applications · cpe:a:linuxfoundation:containerd
  • Every version before 1.5.13
  • From 1.6.0 before 1.6.6
containerdServers and applications · github:containerd/containerd
  • Version 1.6.0
  • Version 1.6.1
  • Version 1.6.2
  • Version 1.6.3
  • Version 1.6.4
  • Version 1.6.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-31030
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-31030
  • GitHub Advisory Database https://github.com/advisories/GHSA-5ffw-gxpp-mxpf
  • github.com https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf