StackRadar

CVE-2021-43784

Medium

Advisory

Published 7 Dec 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.0
base score, highest
EPSS
0.017
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
156
of 17,781 indexed, latest versions
Container images
132
deployed by those charts
Fix available
1 of 1
affected package

Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration in RunC

Carried by container images the latest versions of 156 of 17,781 indexed charts deploy, on 132 images.

Affected packageAffected versionsFixed inImages
github.com/opencontainers/runcgolangv0.0.0-20161107232042-8779fa57eb4a, v0.0.0-20220824004513-5fd4c4d14413, v0.0.0-20230719051532-82f18fe0e44a, v0.1.1+14 more1.0.3, 1.1.0132
OSV records
GHSA-v95c-p5hm-xq8fGO-2022-0274

Charts affected

156 by stars
ChartLatestAffected imagesRadar Score
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-43784.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/opencontainers/runc@v0.1.1
1.0.3

Open the chart page →

7,510
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-43784.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/opencontainers/runc@v0.1.1
1.0.3

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-43784.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/opencontainers/runc@v0.1.1
1.0.3

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-43784.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/opencontainers/runc@v0.1.1
1.0.3

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-43784.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/opencontainers/runc@v0.1.1
1.0.3

Open the chart page →

7,429
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-43784.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/opencontainers/runc@v0.1.1
1.0.3

Open the chart page →

7,552

Container images carrying it

132 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/operator:1.12.06cfce8a071b9
github.com/opencontainers/runc@v1.0.2
1.0.3
1
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/opencontainers/runc@v0.1.1
1.0.3
1
kiosksh/kiosk:0.2.11501725ba2025
github.com/opencontainers/runc@v0.1.1
1.0.3
1
kubeedge/edgemesh-agent:latest460c6061b608
github.com/opencontainers/runc@v1.0.3
1.1.0
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/opencontainers/runc@v0.1.1
1.0.3
1
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
github.com/opencontainers/runc@v1.0.2
1.0.3
1
kusionstack/operating:v0.5.0c28bd96b986b
github.com/opencontainers/runc@v1.0.2
1.0.3
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/opencontainers/runc@v0.1.1
1.0.3
1
library/mariadb:10.7.307e06f2e7ae9
github.com/opencontainers/runc@v1.0.1
1.0.3
1
library/mariadb:10.11.21c33370a599c
github.com/opencontainers/runc@v1.0.1
1.0.3
1
library/mariadb:10.8.2-focal490f01279be1
github.com/opencontainers/runc@v1.0.1
1.0.3
1
library/mariadb:10.79a48ac9f196f
github.com/opencontainers/runc@v1.0.1
1.0.3
1
library/mariadb:10.10.2bfc25a68e113
github.com/opencontainers/runc@v1.0.1
1.0.3
1
library/mariadb:10.6.15e22328f4d714
github.com/opencontainers/runc@v1.0.1
1.0.3
1
library/mariadb:10.9.4fbb8456ebdb1
github.com/opencontainers/runc@v1.0.1
1.0.3
1
library/mysql:8.0.303c1aab708f6e
github.com/opencontainers/runc@v1.0.1
1.0.3
1
library/postgres:13.703652c675ae1
github.com/opencontainers/runc@v1.0.1
1.0.3
1
library/postgres:14.32d1e636f0778
github.com/opencontainers/runc@v1.0.1
1.0.3
1
library/redis:7.0.4091a7b5de688
github.com/opencontainers/runc@v1.0.1
1.0.3
1
librenms/librenms:22.4.14f1f3d667cc7
github.com/opencontainers/runc@v1.0.3
1.1.0
1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/opencontainers/runc@v1.0.0-rc92
1.0.3
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/opencontainers/runc@v0.1.1
1.0.3
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/opencontainers/runc@v0.1.1
1.0.3
1
postgis/postgis:11-2.5f479f6c3435e
github.com/opencontainers/runc@v1.0.1
1.0.3
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/opencontainers/runc@v0.0.0-20230719051532-82f18fe0e44a
1.0.3
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/opencontainers/runc@v0.0.0-20220824004513-5fd4c4d14413
1.0.3
1
redislabs/redisearch:2.4.1433561794c5c8
github.com/opencontainers/runc@v1.0.1
1.0.3
1
robjuz/postgresql-nominatim:latest805c7bab76df
github.com/opencontainers/runc@v1.0.0-rc95
1.0.3
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/opencontainers/runc@v0.1.1
1.0.3
1
yandex/clickhouse-server:latest1cbf75aabe1e
github.com/opencontainers/runc@v1.0.1
1.0.3
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/opencontainers/runc@v1.0.0-rc95
1.0.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller30ce73388ae5
github.com/opencontainers/runc@v0.1.1
1.0.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerb2cd45b8a8a4
github.com/opencontainers/runc@v0.1.1
1.0.3
1
gcr.io/ml-pipeline/mysql:5.7-debiandf28187b5455
github.com/opencontainers/runc@v1.0.1
1.0.3
1
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
github.com/opencontainers/runc@v1.0.1
1.0.3
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
github.com/opencontainers/runc@v1.0.1
1.0.3
1
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/opencontainers/runc@v0.1.1
1.0.3
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/opencontainers/runc@v0.1.1
1.0.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.