The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8471-1 advisory.

    It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attacker could     possibly use this issue to cause containerd to enter an infinite loop, resulting in a denial of service.
    This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
    (CVE-2026-33814)

    Jakub Ciolek and Kyle Elliott discovered that containerd incorrectly handled group parsing when creating     containers from images. An attacker could possibly use this issue to cause containerd to consume excessive     memory, resulting in a denial of service. (CVE-2026-47262)

    Robert Prast discovered that containerd incorrectly propagated labels from image configurations to     containers. An attacker could possibly use this issue to execute arbitrary code on the host. This issue     only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 26.04 LTS.
    (CVE-2026-53488)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : containerd vulnerabilities (USN-8471-1)

critical Nessus Plugin ID 322954

Version 1.3