According to the versions of the containerd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6,     2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach     implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is fixed in     versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. To workaround this vulnerability, users can set up an admission     controller to control accesses to pods/attach resources.(CVE-2025-64329)

    containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6,     2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission     vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and     `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions.
    This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system     administrator permissions so the host can manually chmod the directories to not have group or world     accessible permissions, or to run containerd in rootless mode.(CVE-2024-25621)

Tenable has extracted the preceding description block directly from the EulerOS containerd security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4467 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4467-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                     Arnaud Rebillout     February 05, 2026                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : containerd     Version        : 1.4.13~ds1-1~deb11u6     CVE ID         : CVE-2024-25621 CVE-2025-64329     Debian Bug     : 1120285 1120343

    Multiple vulnerabilities were discovered in containerd, an open-source     container runtime, used by e.g. Docker or Kubernetes.

    CVE-2024-25621

        Overly broad default permission vulnerability. Directory paths         `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri`         and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were         all created with incorrect permissions.

    CVE-2025-64329

        Bug in the CRI Attach implementation where a user can exhaust memory         on the host due to goroutine leaks.

    For Debian 11 bullseye, these problems have been fixed in version     1.4.13~ds1-1~deb11u6.

    We recommend that you upgrade your containerd packages.

    For the detailed security status of containerd please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/containerd

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has containerd packages installed that are affected by multiple vulnerabilities:

  - containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and     2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a     container without validation. This may result in executing an arbitrary command on the host, via a plugin     that consumes container labels for some operations. This issue has been fixed in versions 1.7.33, 2.3.2,     2.2.5, 2.1.9, and 2.0.10. (CVE-2026-53488)

  - containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6,     2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach     implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is fixed in     versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. To workaround this vulnerability, users can set up an admission     controller to control accesses to pods/attach resources. (CVE-2025-64329)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the containerd package has been released.

The version of containerd installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-086 advisory.

    containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6,     2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission     vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and     `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions.
    This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system     administrator permissions so the host can manually chmod the directories to not have group or world     accessible permissions, or to run containerd in rootless mode. (CVE-2024-25621)

    containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6,     2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach     implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is fixed in     versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. To workaround this vulnerability, users can set up an admission     controller to control accesses to pods/attach resources. (CVE-2025-64329)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of containerd installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-078 advisory.

    containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6,     2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission     vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and     `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions.
    This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system     administrator permissions so the host can manually chmod the directories to not have group or world     accessible permissions, or to run containerd in rootless mode. (CVE-2024-25621)

    containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6,     2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach     implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is fixed in     versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. To workaround this vulnerability, users can set up an admission     controller to control accesses to pods/attach resources. (CVE-2025-64329)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of containerd installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-084 advisory.

    containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6,     2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission     vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and     `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions.
    This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system     administrator permissions so the host can manually chmod the directories to not have group or world     accessible permissions, or to run containerd in rootless mode. (CVE-2024-25621)

    containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6,     2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach     implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is fixed in     versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. To workaround this vulnerability, users can set up an admission     controller to control accesses to pods/attach resources. (CVE-2025-64329)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
302400	EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-1353)	Nessus	Huawei Local Security Checks	2026/3/16	2026/3/16	medium
297981	Debian dla-4467 : containerd - security update	Nessus	Debian Local Security Checks	2026/2/5	2026/2/5	medium
343597	NewStart CGSL MAIN 7.02 : containerd Multiple Vulnerabilities (NS-SA-2026-0097)	Nessus	NewStart CGSL Local Security Checks	2026/9/8	2026/9/8	critical
333970	Photon OS 5.0: Containerd PHSA-2025-5.0-91-0682	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/8/10	medium
277754	Amazon Linux 2 : containerd, --advisory ALAS2DOCKER-2025-086 (ALASDOCKER-2025-086)	Nessus	Amazon Linux Local Security Checks	2025/12/8	2026/2/26	medium
277756	Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2025-078 (ALASNITRO-ENCLAVES-2025-078)	Nessus	Amazon Linux Local Security Checks	2025/12/8	2026/2/26	medium
277759	Amazon Linux 2 : containerd, --advisory ALAS2ECS-2025-084 (ALASECS-2025-084)	Nessus	Amazon Linux Local Security Checks	2025/12/8	2026/2/26	medium

检测

插件搜索

medium

medium

critical

medium

medium

medium

medium