CVE-2023-25153

Name of the Vulnerable Software and Affected Versions containerd versions 1.6.17 and earlier, containerd versions 1.5.17 and earlier

Description The issue is related to the import of OCI images in containerd, where there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file could cause a denial of service.

Recommendations Update to containerd version 1.6.18 or later to resolve the issue. Update to containerd version 1.5.18 or later to resolve the issue. As a temporary workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.