CVE-2023-25153P4MEDIUM≥ 0, < 1.5.18·≥ 1.6.0, < 1.6.182023-02-16
CVE-2023-25153 [MEDIUM] CWE-400 OCI image importer memory exhaustion in github.com/containerd/containerd
OCI image importer memory exhaustion in github.com/containerd/containerd
### Impact
When importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could cause a denial of service.
### Patches
This bug has been fixed in containerd 1.6.18 and 1.5.18. Users should update to these versio
ghsaosv