kata-containers

Direct Vulnerabilities

Known vulnerabilities in the kata-containers package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Directory Traversal	*
M HTTP Request Smuggling	*
H Allocation of Resources Without Limits or Throttling	*
M Race Condition	*
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
L Link Following	*
M HTTP Request Smuggling	*
M Insufficient Granularity of Access Control	*
M Improper Certificate Validation	*
L Improper Validation of Unsafe Equivalence in Input	*
H Out-of-bounds Read	*
H Out-of-bounds Read	*
H Improper Verification of Cryptographic Signature	*
L Improper Validation of Integrity Check Value	*
M Missing Release of Resource after Effective Lifetime	*
H Improper Validation of Specified Type of Input	*
M Divide By Zero	*
L Time-of-check Time-of-use (TOCTOU)	*
L Missing Release of Resource after Effective Lifetime	*
H Missing Release of Resource after Effective Lifetime	*
H Unchecked Input for Loop Condition	<0:3.31.0-5.rhaos4.19.el9
H External Control of File Name or Path	*
H Allocation of Resources Without Limits or Throttling	*
H Incorrect Privilege Assignment	*
H Arbitrary Code Injection	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Arbitrary Argument Injection	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
M Out-of-bounds Read	*
H Integer Overflow or Wraparound	*
M Improper Certificate Validation	*
M Out-of-bounds Read	*
H Improper Input Validation	*
M Cross-site Scripting (XSS)	*
M External Control of Assumed-Immutable Web Parameter	*
M Information Exposure	*
H Improper Control of Dynamically-Identified Variables	*
M Improper Output Neutralization for Logs	*
M Integer Overflow or Wraparound	*
M Misinterpretation of Input	*
H Reliance on Untrusted Inputs in a Security Decision	*
M Improper Validation of Unsafe Equivalence in Input	*
M Off-by-one Error	*
H Improper Certificate Validation	*
H Insufficient Granularity of Access Control	*
M HTTP Request Smuggling	*
L Out-of-bounds Write	*
H Improper Validation of Unsafe Equivalence in Input	*
M NULL Pointer Dereference	*
M Allocation of Resources Without Limits or Throttling	*
M Directory Traversal	*
M Time-of-check Time-of-use (TOCTOU)	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Excessive Platform Resource Consumption within a Loop	*
M NULL Pointer Dereference	*
M Improper Certificate Validation	*
M Link Following	*
L Improper Validation of Syntactic Correctness of Input	*
H Improper Verification of Cryptographic Signature	*
M Information Exposure	*
H Improper Preservation of Permissions	*
H Uncaught Exception	*
M Allocation of Resources Without Limits or Throttling	*
H Improper Certificate Validation	*
M Improper Validation of Specified Type of Input	*
L Improper Check or Handling of Exceptional Conditions	*
M Improper Certificate Validation	*
M Signed to Unsigned Conversion Error	*
L Allocation of Resources Without Limits or Throttling	*
M Missing Reference to Active Allocated Resource	*
H Incorrect Execution-Assigned Permissions	*
M Reachable Assertion	*
M Creation of Immutable Text Using String Concatenation	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
H Access of Resource Using Incompatible Type ('Type Confusion')	*
M Improper Check for Unusual or Exceptional Conditions	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Directory Traversal	*
M Allocation of Resources Without Limits or Throttling	*
L Improper Neutralization	*
M Time-of-check Time-of-use (TOCTOU)	*
M HTTP Request Smuggling	<0:3.17.0-2.rhaos4.18.el9
M HTTP Request Smuggling	<0:3.17.0-2.rhaos4.16.el9
L Out-of-bounds Read	*
L Out-of-bounds Read	*
M Buffer Over-read	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Improper Encoding or Escaping of Output	*
L Compiler Optimization Removal or Modification of Security-critical Code	*
M HTTP Request Smuggling	<0:3.13.0-2.rhaos4.20.el9
M Information Exposure	*
L Incorrect Authorization	*
L Incorrect Authorization	*
M Improper Input Validation	*
H Incorrect Privilege Assignment	*
M Improper Validation of Unsafe Equivalence in Input	*
H Link Following	*
M Double Free	*
M Allocation of Resources Without Limits or Throttling	*
L Use After Free	*
M Incorrect Default Permissions	*
M Integer Overflow or Wraparound	*
L Improper Verification of Cryptographic Signature	*
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
H Cross-site Scripting (XSS)	<0:3.1.3-4.rhaos4.14.el9
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
H Allocation of Resources Without Limits or Throttling	<0:3.1.3-4.rhaos4.14.el9
H Buffer Access with Incorrect Length Value	<0:3.1.3-4.rhaos4.14.el9
H Cross-site Scripting (XSS)	<0:3.1.3-4.rhaos4.14.el9
H Cross-site Scripting (XSS)	<0:3.1.3-4.rhaos4.14.el9
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
H Use of a Broken or Risky Cryptographic Algorithm	<0:3.1.3-4.rhaos4.14.el9
H Use After Free	<0:3.1.3-4.rhaos4.14.el9
H CVE-2023-2728	<0:3.1.3-4.rhaos4.14.el9
H CVE-2023-2727	<0:3.1.3-4.rhaos4.14.el9
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
M Improper Certificate Validation	<0:2.5.2-1.el9
M Incorrect Default Permissions	<0:2.5.2-1.el9
M Improper Initialization	<0:2.5.2-1.el9
M Server-Side Request Forgery (SSRF)	<0:2.5.2-1.el9
M Directory Traversal	<0:2.5.2-1.el9
M Improper Access Control	<0:2.5.2-1.el9
M Resource Exhaustion	<0:2.5.2-1.el9
M CVE-2022-41715	<0:2.5.2-1.el9
M Allocation of Resources Without Limits or Throttling	<0:2.5.2-1.el9
M HTTP Request Smuggling	<0:2.5.2-1.el9
M Directory Traversal	<0:2.5.2-1.el9
M Resource Exhaustion	<0:2.5.2-1.el9
M Resource Exhaustion	<0:2.5.2-1.el9
M Information Exposure	<0:2.5.2-1.el9
M Improperly Controlled Sequential Memory Allocation	<0:2.5.2-1.el9
M HTTP Request Smuggling	<0:2.5.2-1.el9
M Race Condition	*
L Improper Input Validation	*
M Resource Exhaustion	*
M Improper Input Validation	*
M Improper Input Validation	*
L Improper Input Validation	*

Vulnerability

Vulnerable Version

Directory Traversal