-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from two key functions: 1) handleResizeEvents lacked context-aware termination, leaving orphaned goroutines when container processes failed to start. 2) createStreams started these goroutines without proper context propagation. The patch adds context handling in both locations - passing req.Context() to handleResizeEvents in createStreams, and implementing context cancellation checks in handleResizeEvents' select statement. The commit diff and CVE description directly correlate to these code paths managing terminal resize event handling and goroutine lifecycle.
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/containerd/containerd | go | < 1.5.16 | 1.5.16 |
| github.com/containerd/containerd | go | >= 1.6.0, < 1.6.12 | 1.6.12 |
KEV Misses 88% of Exploited CVEs- Get the report