| id: GO-2025-3528 |
| modules: |
| - module: github.com/containerd/containerd |
| versions: |
| - fixed: 1.6.38 |
| - introduced: 1.7.0-beta.0 |
| - fixed: 1.7.27 |
| vulnerable_at: 1.7.26 |
| - module: github.com/containerd/containerd/v2 |
| versions: |
| - fixed: 2.0.4 |
| vulnerable_at: 2.0.3 |
| summary: containerd has an integer overflow in User ID handling in github.com/containerd/containerd |
| cves: |
| - CVE-2024-40635 |
| ghsas: |
| - GHSA-265r-hfxg-fhmg |
| references: |
| - advisory: https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg |
| - fix: https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da |
| - fix: https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20 |
| - fix: https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a |
| source: |
| id: GHSA-265r-hfxg-fhmg |
| created: 2025-03-18T12:19:26.864701-04:00 |
| review_status: UNREVIEWED |
