CVE-2026-64773CWE-770denial-of-service

CVE-2026-64773

High · published August 21, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wait can be stretched. This vulnerability is addressed in container version 1.2.0.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00428 · 36.0th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-08-21T02:17Z
Affected products (1)
ProductVersionsFixed in
apple/container≥ 0.3.0, < 1.2.01.2.0
References (1)
https://github.com/apple/container/security/advisories/GHSA-wg28-286f-56v6 · [email protected]
EPSS history
Timeline
  • 20 AUG 21:16Z
    An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's…
    cvelistv5