Docker Swarm encrypted overlay network traffic may be unencrypted

🗓️ 04 Apr 2023 21:12:20Reported by GitHub Advisory DatabaseType

Docker Swarm overlay network may transmit unencrypted traffi

Reporter	Title	Published	Views	Family All 108
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 May 202410:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2024.	8 Aug 202417:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202503:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Multiple Vulnerabilities in Docker affect Cloud Pak System [CVE-2023-28840, CVE-2023-28841, CVE-2023-28842]	25 Dec 202310:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.4.7 fixes multiple security vulnerabilities	26 Mar 202503:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
AlpineLinux	CVE-2023-28841	4 Apr 202321:12	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в docker.io	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the Moby container platform lies in the lack of encryption for confidential data and improper handling of exclusive conditions, allowing attackers to obtain confidential information.	31 Aug 202300:00	–	bdu_fstec
Chainguard	CVE-2023-28841 vulnerabilities	4 Apr 202322:15	–	cgr

Vulners

Node

docker dockerRange23.0.0–23.0.3go

docker dockerRange1.12.0–20.10.24go

Source	Link
github	www.github.com/moby/libnetwork/security/advisories/GHSA-gvm4-2qqg-m333
github	www.github.com/moby/moby/security/advisories/GHSA-232p-vwff-86mp
github	www.github.com/moby/moby/security/advisories/GHSA-33pg-m6jh-5237
github	www.github.com/moby/moby/security/advisories/GHSA-6wrf-mxfj-pf5p
github	www.github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw
github	www.github.com/moby/moby/issues/43382
github	www.github.com/moby/moby/pull/45118
github	www.github.com/moby/libnetwork/blob/d9fae4c73daf76c3b0f77e14b45b8bf612ba764d/drivers/overlay/encryption.go
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-28841
github	www.github.com/advisories/GHSA-33pg-m6jh-5237

18 Apr 2023 22:03Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.8

EPSS0.00696

SSVC