Containerd Imgcrypt vulnerabilities

1 known vulnerability affecting containerd/imgcrypt.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-24778HIGHCVSS 7.5fixed in 1.1.42022-03-25

CVE-2022-24778 [HIGH] CWE-863 CVE-2022-24778: The imgcrypt library provides API exensions for containerd to support encrypted container images and The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by containerd to decrypt encrypted container images. The imgcrypt function `CheckAuthorization` is supposed to check whether the current used is authorized to access an encrypted image and prevent th