Поиск уязвимостей
Количество 75
Количество 75
openSUSE-SU-2026:20902-1
Security update for keybase-client
CVE-2025-67499
The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0 inadvertently forward all traffic with the same destination port as the host port when the portmap plugin is configured with the nftables backend, thus ignoring the destination IP. This includes traffic not intended for the node itself, i.e. traffic to containers hosted on the node. Containers that request HostPort forwarding can intercept all traffic destined for that port. This requires that the portmap plugin be explicitly configured to use the nftables backend. This issue is fixed in version 1.9.0. To workaround, configure the portmap plugin to use the iptables backend. It does not have this vulnerability.
CVE-2025-67499
The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0 inadvertently forward all traffic with the same destination port as the host port when the portmap plugin is configured with the nftables backend, thus ignoring the destination IP. This includes traffic not intended for the node itself, i.e. traffic to containers hosted on the node. Containers that request HostPort forwarding can intercept all traffic destined for that port. This requires that the portmap plugin be explicitly configured to use the nftables backend. This issue is fixed in version 1.9.0. To workaround, configure the portmap plugin to use the iptables backend. It does not have this vulnerability.
CVE-2025-67499
The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0 inadvertently forward all traffic with the same destination port as the host port when the portmap plugin is configured with the nftables backend, thus ignoring the destination IP. This includes traffic not intended for the node itself, i.e. traffic to containers hosted on the node. Containers that request HostPort forwarding can intercept all traffic destined for that port. This requires that the portmap plugin be explicitly configured to use the nftables backend. This issue is fixed in version 1.9.0. To workaround, configure the portmap plugin to use the iptables backend. It does not have this vulnerability.
openSUSE-SU-2026:20730-1
Security update for apptainer
openSUSE-SU-2026:20798-1
Security update for trivy
SUSE-SU-2026:0014-1
Security update for buildah
SUSE-SU-2025:4526-1
Security update for buildah
ROS-20260320-80-0007
Уязвимость etcd
ROS-20260320-73-0007
Уязвимость etcd
ROS-20260129-80-0058
Уязвимость portainer-ce
ROS-20260129-73-0062
Уязвимость portainer-ce
ALT-PU-2026-3297
ALT-PU-2026-3297: package `cert-manager` update to version 1.19.3-alt1
openSUSE-SU-2026:20438-1
Security update for docker-compose
CVE-2025-58181
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
CVE-2025-58181
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
CVE-2025-58181
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
CVE-2025-58181
SSH servers parsing GSSAPI authentication requests do not validate the ...
openSUSE-SU-2026:21824-1
Security update for containerized-data-importer1.65
GHSA-jv3w-x3r3-g6rm
CNA Plugins Portmap nftables backend can intercept non-local traffic
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2026:20902-1 Security update for keybase-client | 5 месяцев назад | ||
 | CVE-2025-67499 The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0 inadvertently forward all traffic with the same destination port as the host port when the portmap plugin is configured with the nftables backend, thus ignoring the destination IP. This includes traffic not intended for the node itself, i.e. traffic to containers hosted on the node. Containers that request HostPort forwarding can intercept all traffic destined for that port. This requires that the portmap plugin be explicitly configured to use the nftables backend. This issue is fixed in version 1.9.0. To workaround, configure the portmap plugin to use the iptables backend. It does not have this vulnerability. | CVSS3: 3.6 | 0% Низкий | 11 месяцев назад |
 | CVE-2025-67499 The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0 inadvertently forward all traffic with the same destination port as the host port when the portmap plugin is configured with the nftables backend, thus ignoring the destination IP. This includes traffic not intended for the node itself, i.e. traffic to containers hosted on the node. Containers that request HostPort forwarding can intercept all traffic destined for that port. This requires that the portmap plugin be explicitly configured to use the nftables backend. This issue is fixed in version 1.9.0. To workaround, configure the portmap plugin to use the iptables backend. It does not have this vulnerability. | CVSS3: 6.6 | 0% Низкий | 11 месяцев назад |
 | CVE-2025-67499 The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0 inadvertently forward all traffic with the same destination port as the host port when the portmap plugin is configured with the nftables backend, thus ignoring the destination IP. This includes traffic not intended for the node itself, i.e. traffic to containers hosted on the node. Containers that request HostPort forwarding can intercept all traffic destined for that port. This requires that the portmap plugin be explicitly configured to use the nftables backend. This issue is fixed in version 1.9.0. To workaround, configure the portmap plugin to use the iptables backend. It does not have this vulnerability. | CVSS3: 3.6 | 0% Низкий | 11 месяцев назад |
| openSUSE-SU-2026:20730-1 Security update for apptainer | 6 месяцев назад | ||
| openSUSE-SU-2026:20798-1 Security update for trivy | 9 месяцев назад | ||
| SUSE-SU-2026:0014-1 Security update for buildah | 10 месяцев назад | ||
| SUSE-SU-2025:4526-1 Security update for buildah | 11 месяцев назад | ||
 | ROS-20260320-80-0007 Уязвимость etcd | CVSS3: 5.3 | 1% Низкий | 8 месяцев назад |
| ROS-20260320-73-0007 Уязвимость etcd | CVSS3: 5.3 | 1% Низкий | 8 месяцев назад |
| ROS-20260129-80-0058 Уязвимость portainer-ce | CVSS3: 5.3 | 1% Низкий | 9 месяцев назад |
| ROS-20260129-73-0062 Уязвимость portainer-ce | CVSS3: 5.3 | 1% Низкий | 9 месяцев назад |
| ALT-PU-2026-3297 ALT-PU-2026-3297: package `cert-manager` update to version 1.19.3-alt1 | CVSS3: 9.9 | 9 месяцев назад | |
| openSUSE-SU-2026:20438-1 Security update for docker-compose | 8 месяцев назад | ||
| CVE-2025-58181 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. | CVSS3: 5.3 | 1% Низкий | 12 месяцев назад |
| CVE-2025-58181 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. | CVSS3: 5.3 | 1% Низкий | 12 месяцев назад |
| CVE-2025-58181 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. | CVSS3: 5.3 | 1% Низкий | 12 месяцев назад |
| CVE-2025-58181 SSH servers parsing GSSAPI authentication requests do not validate the ... | CVSS3: 5.3 | 1% Низкий | 12 месяцев назад |
| openSUSE-SU-2026:21824-1 Security update for containerized-data-importer1.65 | 2 месяца назад | ||
| GHSA-jv3w-x3r3-g6rm CNA Plugins Portmap nftables backend can intercept non-local traffic | CVSS3: 6.6 | 0% Низкий | 11 месяцев назад |
Уязвимостей на страницу