CVE-2024-29018 External DNS requests from 'internal' networks could lead to data exfiltration

🗓️ 20 Mar 2024 20:27:00Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Moby enables custom internal networks for containers with unique IPs, restricting external communication.

Reporter	Title	Published	Views	Family All 177
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in docker affect Cloud Pak System[CVE-2024-24557, CVE-2024-29018]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities (CVE-2023-26125, CVE-2023-28155, CVE-2024-29018)	11 Aug 202513:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5.6 addresses the security vulnerabilities listed in the CVEs below.	26 Jun 202414:33	–	ibm
Tenable Nessus	Amazon Linux 2023 : docker (ALAS2023-2024-674)	1 Aug 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker (ALASDOCKER-2024-040)	1 Aug 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker (ALASECS-2024-042)	5 Sep 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2024-041)	31 Jul 202400:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: moby-engine (CVE-2024-29018)	10 Apr 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2024-1879)	15 Jul 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2024-1903)	15 Jul 202400:00	–	nessus

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29018.json
github	www.github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-29018
github	www.github.com/moby/moby/pull/46609

16 Apr 2026 04:32Current

6Medium risk

Vulners AI Score6

CVSS 3.15.9

EPSS0.00357

moby framework custom networks internal networks networking implementation container communication unique ip addresses docker engine service discovery dns requests.