Lucene search

K
redosRedosROS-20240503-09
HistoryMay 03, 2024 - 12:00 a.m.

ROS-20240503-09

2024-05-0300:00:00
redos.red-soft.ru
3
vulnerability
ipv6
moby
container isolation
sensitive information
exploitation

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

Vulnerability in the IPv6 implementation of the container isolation software tool
Moby is related to disclosure of information in an erroneous data area. Exploitation of the vulnerability could allow
an attacker to obtain sensitive information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64docker-ce<= 24.0.9-2UNKNOWN

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%