187 matches found
POC-CopyEscape-CVE-2026-17106
CopyEscape — CVE-2026-17106 の PoC CopyEscape CVE-2026-17106 の教育的な Proof of Concept。docker cp における TOCTOU 競合状態の脆弱性で、悪意のあるコンテナが Docker ホスト上に任意のファイルを書き込むことを可能にします。この脆弱性を発見・文書化した masasron 氏によるブログ記事 "CopyEscape: Taking Over Docker Hosts with docker cp" に触発されたものです。 目次 1. 実行概要 2. 法的通知 3. 攻撃チェーンの構造 4. 要件...
CopyEscape-CVE-2026-17106
CopyEscape: docker cp で Docker ホストを乗っ取る CVE-2026-17106 これはブログ記事 CopyEscape:docker cp で Docker ホストを乗っ取る — CVE-2026-17106 の PoC リポジトリです。 CopyEscape は、悪意のある実行中のコンテナが Docker のアーカイブ生成処理と競合し、不整合な tar ストリームを作成できるようにします。脆弱な Docker CLI は、展開中に仕込まれたシンボリックリンクをたどり、docker cp...
CLEANSTART-2026-FH32149 Moby is an open source container framework
Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...
CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...
Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...
CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow
Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...
CLEANSTART-2024-XV18933 Git is an open source, scalable, distributed revision control system
Security vulnerability affects the docker-cli-compose package. Git is an open source, scalable, distributed revision control system...
CLEANSTART-2024-OB04829 In net/http in Go before 1
Security vulnerability affects the docker-cli-compose package. In net/http in Go before 1...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: buildkitd, zot, skaffold, helm-set-status, scorecard, tigera-operator, kubevela, chartmuseum, docker-compose, rancher-agent, kube-arangodb, trivy, fuse-overlayfs-snapshotter, helm-mapkubeapis, xeol, kubescape, manifest-tool, k8sgpt, rancher, headlamp, zarf, steampipe...
Astra Linux – Vulnerability in docker.io
Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...
CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5
CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5. A patched version of the package is available...
AZL-97004 CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
GO-2026-4859 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, zot, skaffold, kaniko, kubescape, scorecard, buildah, docker-compose, conftest, podman, guac, trivy-operator, trivy, osv-scanner...
GO-2026-4858 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, zot, skaffold, kaniko, kubescape, scorecard, buildah, docker-compose, conftest, podman, guac, trivy-operator, trivy, osv-scanner...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, terraform-docs, podinfo, crossplane-provider-aws-kms, wuzz, aws-node-termination-handler, crossplane-provider-aws-rds, crossplane-provider-aws-sqs, gomplate, kubeflow-pipelines, knative-serving, kubevela, nri-prometheus,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: tw, crossplane-provider-aws-kms, crossplane-provider-aws-rds, gomplate, crossplane-provider-aws-sqs, docker-compose, crossplane-provider-aws-eks, gptscript, melange, trivy, openbao, istio, src, terraform-provider-azapi, gitlab-runner, gitea,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: zot, skaffold, policy-controller, spire-server, gh, sigstore-scaffolding, neuvector-sigstore-interface, vexctl, teleport, kubescape, ratify, witness, aactl, zarf, kyverno-notation-aws, docker-cli-buildx, gitsign, flux-source-controller, falcoctl, tekton-chains, ko,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: buildkitd, zot, skaffold, policy-controller, spire-server, trivy, gh, sigstore-scaffolding, neuvector-sigstore-interface, kyverno, vexctl, teleport, kubescape, ratify, witness, aactl, zarf, kyverno-notation-aws, docker-cli-buildx, gitsign, docker,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: helm-set-status, chartmuseum, gptscript, trivy, harbor-registry, wgcf, src, terraform-provider-azapi, cloud-sql-proxy, k8sgpt, thanos-operator, kor, kapp, fulcio, rancher-system-agent, headlamp, aactl, prometheus, kubernetes-csi-driver-hostpath, hubble, cerbos,...
