218 matches found
CopyEscape-CVE-2026-17106
CopyEscape: Taking Over Docker Hosts with docker cp CVE-2026-17106 This is the proof-of-concept repository for the blog post CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape allows a malicious running container to race Docker's archive producer and create an...
POC-CopyEscape-CVE-2026-17106
CopyEscape — PoC for CVE-2026-17106 Educational Proof of Concept of CopyEscape CVE-2026-17106, a TOCTOU race condition vulnerability in docker cp that allows a malicious container to write arbitrary files on the Docker host. Inspired by the original work of masasron , who discovered and documente...
CVE-2026-92543 affecting package docker-cli for versions less than 25.0.7-6
CVE-2026-92543 affecting package docker-cli for versions less than 25.0.7-6. A patched version of the package is available...
CVE-2026-78669 affecting package docker-cli for versions less than 25.0.7-6
CVE-2026-78669 affecting package docker-cli for versions less than 25.0.7-6. A patched version of the package is available...
Astra Linux – Vulnerability in docker.io
Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...
CLEANSTART-2026-YX87977 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default
Security vulnerability affects the flux-image-automation-controller package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default...
AZL-107324 CVE-2026-97032 affecting package docker-cli 25.0.7-5
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...
AZL-107327 CVE-2026-78669 affecting package docker-cli 25.0.7-5
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...
AZL-107339 CVE-2026-78659 affecting package docker-cli 25.0.7-5
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
AZL-107342 CVE-2026-78660 affecting package docker-cli 25.0.7-5
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...
AZL-107330 CVE-2026-78663 affecting package docker-cli 25.0.7-5
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
AZL-107336 CVE-2026-61801 affecting package docker-cli 25.0.7-5
The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...
[SECURITY] Fedora 44 Update: docker-buildx-0.37.2-1.fc44
Docker CLI plugin for extended build capabilities with BuildKit...
AZL-107333 CVE-2026-92543 affecting package docker-cli 25.0.7-5
Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...
ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in github.com/docker/cli - Patched by Root
Root has patched CVE-2025-15558 in the github.com/docker/cli package for Root:Go. Multiple fixed versions available...
CLEANSTART-2026-RR17110 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the docker-cli-buildx package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-SK27128 Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps
Security vulnerability affects the docker-cli-buildx package. Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps...
CLEANSTART-2026-ZT40995 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...
CLEANSTART-2026-DU09908 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...