~/products/github.com/containers_storage

pipeline liveDigest Docs

Github.Com Containers Storage vulnerabilities

1 known vulnerability affecting github.com/containers_storage.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2021-20291P4MEDIUM≥ 0, < 1.28.12021-05-10

CVE-2021-20291 [MEDIUM] CWE-400 Improper Locking in github.com/containers/storage Improper Locking in github.com/containers/storage A deadlock vulnerability was found in `github.com/containers/storage` in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An a

Github.Com Containers Storage vulnerabilities | cvebase