CVE-2026-53493
2026-09-25
01h16 +00:00
01h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability. Versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1 fix the issue.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Uncontrolled Resource Consumption The product does not properly control the allocation and maintenance of a limited resource. |
||
| Allocation of Resources Without Limits or Throttling The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated. |
||
| Excessive Iteration The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed. |
