CVE-2026-47262
published 2026-07-01CVE-2026-47262: containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously…
PriorityP423medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.27%
17.4th percentile
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker Engine or Kubernetes control-plane components. This issue has been fixed in versions 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2.
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| aquasecurity | trivy | — | — |
| buildah_project | buildah | — | — |
| container-tools_rhel8 | buildah | — | — |
| container-tools_rhel8 | conmon | — | — |
| container-tools_rhel8 | podman | — | — |
| container-tools_rhel8 | skopeo | — | — |
| containerd | containerd | — | — |
| containerd | containerd | — | — |
| containerd | containerd | — | — |
| containerd | containerd | — | — |
| containerd | containerd | — | — |
| github.com | containerd_containerd | >= 1.7.0 < 1.7.33 | 1.7.33 |
| github.com | containerd_containerd_v2 | >= 2.0.0 < 2.0.10 | 2.0.10 |
| github.com | containerd_containerd_v2 | >= 2.1.0 < 2.1.9 | 2.1.9 |
| github.com | containerd_containerd_v2 | >= 2.2.0 < 2.2.5 | 2.2.5 |
| github.com | containerd_containerd_v2 | >= 2.3.0 < 2.3.2 | 2.3.2 |
| github.com | moby_sys_user | >= 0 < 0.4.1 | 0.4.1 |
| linuxfoundation | containerd | >= 1.7.0 < 1.7.33 | 1.7.33 |
| linuxfoundation | containerd | >= 2.0.0 < 2.0.10 | 2.0.10 |
| linuxfoundation | containerd | >= 2.1.0 < 2.1.9 | 2.1.9 |
| linuxfoundation | containerd | >= 2.2.0 < 2.2.5 | 2.2.5 |
| linuxfoundation | containerd | >= 2.3.0 < 2.3.2 | 2.3.2 |
| open-telemetry | opentelemetry-collector-contrib | — | — |
| podman_project | podman | — | — |
| ubuntu | containerd | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv4.05.3MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
ghsa5.5MEDIUM
vendor_ubuntu7.5HIGH
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files
ghsa·2026-10-08·CVSS 5.5
CVE-2026-61801 [MEDIUM] CWE-400 github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files
A denial-of-service (DoS) vulnerability exists in `github.com/moby/sys/user` before v0.4.1 when parsing specially crafted user or group database files. An attacker able to supply a malicious `/etc/passwd` or `/etc/group`-style file may cause excessive memory consumption, potentially resulting in process termination due to Out Of Memory (OOM) conditions.
This issue is related to containerd [CVE-2026-47262] / [GHSA-jpcc-p29g-p8mq](https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq), which describes one practical exploitation path through processing untrusted container image content. Applications using `github.com/moby/sys/user` to parse untrusted user or group da
VulDB
containerd up to 2.3.1 Image denial of service (Nessus ID 321801 / WID-SEC-2026-2009)
vuldb·2026-06-21
CVE-2026-47262 [LOW] containerd up to 2.3.1 Image denial of service (Nessus ID 321801 / WID-SEC-2026-2009)
A vulnerability was found in containerd up to 1.7.32/2.0.9/2.1.8/2.2.4/2.3.1. It has been declared as problematic. This issue affects some unknown processing of the component Image Handler. Executing a manipulation can lead to denial of service.
The identification of this vulnerability is CVE-2026-47262. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
GHSA
containerd image-triggered runtime DoS via unbounded group parsing
ghsa·2026-06-19
CVE-2026-47262 [MEDIUM] CWE-400 containerd image-triggered runtime DoS via unbounded group parsing
containerd image-triggered runtime DoS via unbounded group parsing
### Impact
A vulnerability in containerd allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker Engine or Kubernetes control-plane components.
### Patches
This bug has been fixed in the following containerd versions:
* 2.3.2
* 2.2.5
* 2.1.9
* 2.0.10
* 1.7.33
Users should update to these versions to resolve the issue.
### Workarounds
Ensure that only trusted images are used and that only trusted users have permissions to import images or schedule pods.
### Credits
The
Red Hat
github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing
vendor_redhat·2026-07-01·CVSS 5.5
CVE-2026-47262 [MEDIUM] CWE-770 github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing
github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker Engine or Kubernetes control-plane components. This issue has been fixed in versions 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2.
A flaw was found in containerd, an open-source container runtime. A remote attacker could exploit t
Ubuntu
containerd vulnerabilities
vendor_ubuntu·2026-06-25·CVSS 7.5
CVE-2026-53492 [HIGH] containerd vulnerabilities
Title: containerd vulnerabilities
Summary: Several security issues were fixed in containerd.
It was discovered that containerd incorrectly handled HTTP/2 SETTINGS
frames. A remote attacker could possibly use this issue to cause containerd
to enter an infinite loop, resulting in a denial of service. (CVE-2026-33814)
Jakub Ciolek and Kyle Elliott discovered that containerd incorrectly
handled group parsing when creating containers from images. An attacker
could possibly use this issue to cause containerd to consume excessive
memory, resulting in a denial of service. (CVE-2026-47262)
Henry Beberman and Robert Prast discovered that containerd incorrectly
validated image references when importing container checkpoints. An
attacker could possibly use this issue to poison the local image cach
Ubuntu
containerd vulnerabilities
vendor_ubuntu·2026-06-25·CVSS 7.5
CVE-2026-33814 [HIGH] containerd vulnerabilities
Title: containerd vulnerabilities
Summary: Several security issues were fixed in containerd.
It was discovered that containerd incorrectly handled HTTP/2 SETTINGS
frames. A remote attacker could possibly use this issue to cause containerd
to enter an infinite loop, resulting in a denial of service. This issue
only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and
Ubuntu 22.04 LTS. (CVE-2026-33814)
Jakub Ciolek and Kyle Elliott discovered that containerd incorrectly
handled group parsing when creating containers from images. An attacker
could possibly use this issue to cause containerd to consume excessive
memory, resulting in a denial of service. (CVE-2026-47262)
Robert Prast discovered that containerd incorrectly propagated labels
from image configurations to container
Ubuntu
containerd vulnerabilities
vendor_ubuntu·2026-06-25·CVSS 7.5
CVE-2026-47262 [HIGH] containerd vulnerabilities
Title: containerd vulnerabilities
Summary: Several security issues were fixed in containerd.
It was discovered that containerd incorrectly handled HTTP/2 SETTINGS
frames. A remote attacker could possibly use this issue to cause containerd
to enter an infinite loop, resulting in a denial of service. (CVE-2026-33814)
Jakub Ciolek and Kyle Elliott discovered that containerd incorrectly
handled group parsing when creating containers from images. An attacker
could possibly use this issue to cause containerd to consume excessive
memory, resulting in a denial of service. (CVE-2026-47262)
Henry Beberman and Robert Prast discovered that containerd incorrectly
validated image references when importing container checkpoints. An
attacker could possibly use this issue to poison the local image cach
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-47262 kata-containers: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 kata-containers: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 kata-containers: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as
Bugzilla
CVE-2026-47262 grype: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 grype: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 grype: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker
Bugzilla
CVE-2026-47262 docker-buildx: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 docker-buildx: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 docker-buildx: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as th
Bugzilla
CVE-2026-47262 singularity-ce: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 singularity-ce: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 singularity-ce: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as t
Bugzilla
CVE-2026-47262 doctl: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 doctl: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 doctl: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker
Bugzilla
CVE-2026-47262 cri-o1.34: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 cri-o1.34: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 cri-o1.34: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Do
Bugzilla
CVE-2026-47262 cri-o: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 cri-o: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 cri-o: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker
Bugzilla
CVE-2026-47262 kubernetes1.35: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 kubernetes1.35: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 kubernetes1.35: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as t
Bugzilla
CVE-2026-47262 jfrog-cli: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 jfrog-cli: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 jfrog-cli: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Do
Bugzilla
CVE-2026-47262 singularity-ce: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 singularity-ce: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
CVE-2026-47262 singularity-ce: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the
Bugzilla
CVE-2026-47262 moby-engine: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 moby-engine: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 moby-engine: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the
Bugzilla
CVE-2026-47262 helm3: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 helm3: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
CVE-2026-47262 helm3: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker E
Bugzilla
CVE-2026-47262 stargz-snapshotter: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 stargz-snapshotter: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 stargz-snapshotter: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such
Bugzilla
CVE-2026-47262 containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
CVE-2026-47262 containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Doc
Bugzilla
CVE-2026-47262 tailscale: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 tailscale: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 tailscale: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Do
Bugzilla
CVE-2026-47262 trivy: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 trivy: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 trivy: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker
Bugzilla
CVE-2026-47262 inspektor-gadget: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 inspektor-gadget: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 inspektor-gadget: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as
Bugzilla
CVE-2026-47262 k9s: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 k9s: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 k9s: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker E
Bugzilla
CVE-2026-47262 docker-compose: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 docker-compose: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 docker-compose: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as t
Bugzilla
CVE-2026-47262 reg: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 reg: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
CVE-2026-47262 reg: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker Eng
Bugzilla
CVE-2026-47262 golang-github-containerd-fuse-overlayfs-snapshotter: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 golang-github-containerd-fuse-overlayfs-snapshotter: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 golang-github-containerd-fuse-overlayfs-snapshotter: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavaila
Bugzilla
CVE-2026-47262 kubernetes1.36: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 kubernetes1.36: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 kubernetes1.36: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as t
Bugzilla
CVE-2026-47262 kubernetes1.34: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 kubernetes1.34: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 kubernetes1.34: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as t
Bugzilla
CVE-2026-47262 helm: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 helm: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 helm: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker
Bugzilla
CVE-2026-47262 cri-o1.33: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 cri-o1.33: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 cri-o1.33: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Do
Bugzilla
CVE-2026-47262 kubernetes1.32: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 kubernetes1.32: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 kubernetes1.32: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as t
Bugzilla
CVE-2026-47262 containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the D
Bugzilla
CVE-2026-47262 cri-o1.31: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 cri-o1.31: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 cri-o1.31: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Do
Bugzilla
CVE-2026-47262 cri-o1.30: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 cri-o1.30: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 cri-o1.30: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Do
Bugzilla
CVE-2026-47262 cri-o1.32: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 cri-o1.32: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 cri-o1.32: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Do
Bugzilla
CVE-2026-47262 helm3: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 helm3: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 helm3: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker
Bugzilla
CVE-2026-47262 cri-o1.35: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 cri-o1.35: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 cri-o1.35: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Do
Bugzilla
CVE-2026-47262 docker-buildkit: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 docker-buildkit: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 docker-buildkit: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as
Bugzilla
CVE-2026-47262 trivy: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 trivy: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
CVE-2026-47262 trivy: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker E
Bugzilla
CVE-2026-47262 pack: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 pack: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
CVE-2026-47262 pack: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker En
Bugzilla
CVE-2026-47262 kubernetes1.33: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 kubernetes1.33: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 kubernetes1.33: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as t
Bugzilla
CVE-2026-47262 vagrant: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 vagrant: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 vagrant: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Dock
Bugzilla
CVE-2026-47262 manifest-tool: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
bugzilla·2026-07-02·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 manifest-tool: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
CVE-2026-47262 manifest-tool: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as th
Bugzilla
CVE-2026-47262 github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing
bugzilla·2026-07-01·CVSS 5.5
CVE-2026-47262 [MEDIUM] CVE-2026-47262 github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing
CVE-2026-47262 github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing
containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker Engine or Kubernetes control-plane components. This issue has been fixed in versions 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2.
2026-07-01
Published