The vulnerability of the Moby container isolation system creation software, related to competitive access to resources, allows a intruder to trigger a service failure.

🗓️ 05 Dec 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Moby container isolation vulnerability allows remote attacker to trigger service failure via resource contention.

Reporter	Title	Published	Views	Family All 85
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to Race Condition due to moby ( CVE-2024-36621 )	17 Jun 202508:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to a Race Condition via Moby in Grafana (CVE-2024-36621)	29 Jul 202520:52	–	ibm
IBM Security Bulletins	Security Bulletin: Moby Multiple Concurrency and NULL Pointer Dereference Vulnerabilities Leading to DoS and Data Corruption, affects watsonx.data	5 Dec 202505:21	–	ibm
AstraLinux	Astra Linux - уязвимость в docker.io-app	20 May 202605:53	–	astralinux
Tenable Nessus	Azure Linux 3.0 Security Update: moby-engine (CVE-2024-36621)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2025-1134)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2025-1153)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2025-1171)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2025-1187)	10 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-36621)	19 Dec 202400:00	–	nessus

Vulners

Node

moby mobyRange<26.0.0-rc2

Source	Link
gist	www.gist.github.com/1047524396/5d44459edab5fafcdf86b43909b81135
github	www.github.com/Moby/Moby/blob/v25.0.5/builder/builder-next/adapters/snapshot/layer.go
github	www.github.com/Moby/Moby/commit/37545cc644344dcb576cba67eb7b6f51a463d31e
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-36621
web	www.web.nvd.nist.gov/view/vuln/detail

05 Dec 2024 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.9

CVSS 35.3

EPSS0.00625

Moby container isolation resource contention remote attacker service failure