StackRadar

CVE-2023-25153

Medium

Advisory

Published 16 Feb 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
201
of 17,781 indexed, latest versions
Container images
179
deployed by those charts
Fix available
1 of 1
affected package

OCI image importer memory exhaustion in github.com/containerd/containerd

Carried by container images the latest versions of 201 of 17,781 indexed charts deploy, on 179 images.

Affected packageAffected versionsFixed inImages
github.com/containerd/containerdgolangv1.3.0, v1.3.2, v1.3.3, v1.3.4+31 more1.5.18, 1.6.18179
OSV records
GHSA-259w-8hf6-59c2
Also known as
GO-2023-1573

Charts affected

201 by stars
ChartLatestAffected imagesRadar Score
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2023-25153.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/containerd/containerd@v1.6.15
1.6.18

Open the chart page →

13,677

Container images carrying it

179 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/containerd/containerd@v1.6.1
1.6.18
7
quay.io/devtron/kubectl:latest2ad610626658
github.com/containerd/containerd@v1.6.6
1.6.18
6
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/containerd/containerd@v1.4.1
1.5.18
4
hyperledger/fabric-tools:2.4b1194f509085
github.com/containerd/containerd@v1.4.1
1.5.18
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/containerd/containerd@v1.6.15
1.6.18
4
argoproj/argocd:v1.8.1830e86cacefd
github.com/containerd/containerd@v1.3.4
1.5.18
3
grafana/promtail:2.4.2626900031c4e
github.com/containerd/containerd@v1.5.4
1.5.18
3
library/docker:20.10-dind:20-dindaf96c680a7e1
github.com/containerd/containerd@v1.6.16-0.20230124210447-1709cfe273d9
1.6.18
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/containerd/containerd@v1.6.6
1.6.18
3
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/containerd/containerd@v1.4.3
1.5.18
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/containerd/containerd@v1.5.4
1.5.18
3
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/containerd/containerd@v1.4.4
1.5.18
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/containerd/containerd@v1.6.15
1.6.18
2
library/traefik:v2.57d5a6ae66572
github.com/containerd/containerd@v1.5.8
1.5.18
2
prom/prometheus:v2.21.0d43417c260e5
github.com/containerd/containerd@v1.3.4
1.5.18
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/containerd/containerd@v1.6.12-k3s1
1.6.18
2
xelalex/dregsy:0.4.3574054e1c417
github.com/containerd/containerd@v1.6.3
1.6.18
2
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/containerd/containerd@v1.6.6
1.6.18
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/containerd/containerd@v1.6.15
1.6.18
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/containerd/containerd@v1.3.2
1.5.18
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/containerd/containerd@v1.4.3
1.5.18
2
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/containerd/containerd@v1.3.4
1.5.18
2
alpine/k8s:1.22.600ac10bcb759
github.com/containerd/containerd@v1.5.9
1.5.18
1
alpine/k8s:1.27.321b24e6bf801
github.com/containerd/containerd@v1.6.15
1.6.18
1
alpine/k8s:1.31.106dbe6f391eda
github.com/containerd/containerd@v1.6.15
1.6.18
1
alpine/k8s:1.31.137a319b15cfc9
github.com/containerd/containerd@v1.6.15
1.6.18
1
alpine/k8s:1.32.47e1e7d5b7a96
github.com/containerd/containerd@v1.6.15
1.6.18
1
alpine/k8s:1.31.49c4976d47656
github.com/containerd/containerd@v1.6.15
1.6.18
1
alpine/k8s:1.18.16a41efe02a041
github.com/containerd/containerd@v1.4.4
1.5.18
1
alpine/k8s:1.30.0bd01dae02676
github.com/containerd/containerd@v1.6.15
1.6.18
1
alpine/k8s:1.30.2cd560fce90f7
github.com/containerd/containerd@v1.6.15
1.6.18
1
alpine/k8s:1.28.13e5c0b053fed7
github.com/containerd/containerd@v1.6.15
1.6.18
1
alpine/k8s:1.32.3eec354133193
github.com/containerd/containerd@v1.6.15
1.6.18
1
alpine/k8s:1.28.2fc059f056ad0
github.com/containerd/containerd@v1.6.15
1.6.18
1
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/containerd/containerd@v1.3.3
1.5.18
1
anchore/anchore-engine:v0.10.0bde9eedf639d
github.com/containerd/containerd@v1.3.4
1.5.18
1
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/containerd/containerd@v1.4.4
1.5.18
1
aquasec/trivy:0.32.0973d0df16189
github.com/containerd/containerd@v1.6.6
1.6.18
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/containerd/containerd@v1.3.3
1.5.18
1
beopenit/door-helm:v3.0.1b4d9f9bee224
github.com/containerd/containerd@v1.4.11
1.5.18
1
bsgrigorov/helm-operator:latest45ab095f09c8
github.com/containerd/containerd@v1.4.3
1.5.18
1
coderenvs/coder-service:1.44.61deffc4670e6
github.com/containerd/containerd@v1.6.8
1.6.18
1
conduction/agendaservice-php:latest9cfeeb6c7c20
github.com/containerd/containerd@v1.3.2
1.5.18
1
conduction/balance-registration-php:devc36094a41369
github.com/containerd/containerd@v1.3.2
1.5.18
1
conduction/betaalservice-php:latestece1ab544c57
github.com/containerd/containerd@v1.3.2
1.5.18
1
conduction/cgrc-php:dev25415534d245
github.com/containerd/containerd@v1.3.2
1.5.18
1
conduction/checkin-component-php:dev3423845692c1
github.com/containerd/containerd@v1.3.2
1.5.18
1
conduction/conduction-ui-php:dev2744565516e8
github.com/containerd/containerd@v1.3.2
1.5.18
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/containerd/containerd@v1.3.2
1.5.18
1
conduction/docparser-php:devb6f95c8ead7d
github.com/containerd/containerd@v1.3.2
1.5.18
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.