Lucene search
+L

2824 matches found

OSV
OSV
added 2023/04/04 9:13 p.m.46 views

GHSA-232P-VWFF-86MP Docker Swarm encrypted overlay network may be unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

7.5CVSS8.2AI score0.02733EPSS
SaveExploits2References9
Vulnrichment
Vulnrichment
added 2023/04/04 9:13 p.m.5 views

CVE-2023-28840 moby/moby's dockerd daemon encrypted overlay network may be unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

7.5CVSS8.3AI score0.02733EPSS
SaveExploits1References10
Debian CVE
Debian CVE
added 2023/04/04 9:13 p.m.52 views

CVE-2023-28840

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

8.7CVSS7.5AI score0.02733EPSS
SaveExploits1
Cvelist
Cvelist
added 2023/04/04 9:13 p.m.31 views

CVE-2023-28840 moby/moby's dockerd daemon encrypted overlay network may be unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

7.5CVSS9.1AI score0.02733EPSS
SaveExploits1References10
OSV
OSV
added 2023/04/04 9:13 p.m.39 views

CVE-2023-28840 moby/moby's dockerd daemon encrypted overlay network may be unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

7.5CVSS7.3AI score0.02733EPSS
SaveExploits1References12
Github Security Blog
Github Security Blog
added 2023/04/04 9:12 p.m.72 views

Docker Swarm encrypted overlay network traffic may be unencrypted

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS6.8AI score0.00696EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2023/04/04 9:12 p.m.40 views

GHSA-33PG-M6JH-5237 Docker Swarm encrypted overlay network traffic may be unencrypted

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.7AI score0.02733EPSS
SaveExploits2References10
CVE
CVE
added 2023/04/04 9:12 p.m.703 views

CVE-2023-28841

CVE-2023-28841 describes a vulnerability in Moby/Docker Swarm encrypted overlay networks where, on affected platforms, encrypted overlay traffic can silently transmit unencrypted data due to how IPSec/VXLAN are enforced via iptables rules (using the xt_u32 module and VNI filtering). This can allo...

6.8CVSS7.4AI score0.00696EPSS
SaveExploits1References11Affected Software1
Cvelist
Cvelist
added 2023/04/04 9:12 p.m.29 views

CVE-2023-28841 moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.6AI score0.00696EPSS
SaveExploits1References11
Github Security Blog
Github Security Blog
added 2023/04/04 9:11 p.m.39 views

Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7AI score0.0144EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2023/04/04 9:11 p.m.62 views

GHSA-6WRF-MXFJ-PF5P Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.8AI score0.02733EPSS
SaveExploits2References7
Vulnrichment
Vulnrichment
added 2023/04/04 9:7 p.m.4 views

CVE-2023-28842 moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.5AI score0.0144EPSS
SaveExploits0References8
CVE
CVE
added 2023/04/04 9:7 p.m.751 views

CVE-2023-28842

CVE-2023-28842 affects Moby/dockerd, specifically Swarm overlay with encrypted VXLAN: an endpoint on an encrypted overlay can be unauthenticated, allowing cleartext VXLAN traffic to be injected or leaked under certain conditions. The issue stems from how iptables rules and IPsec handling are appl...

6.8CVSS7.6AI score0.0144EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
added 2023/04/04 9:7 p.m.47 views

CVE-2023-28842

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7AI score0.0144EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/04/04 9:7 p.m.50 views

CVE-2023-28842 moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.8AI score0.0144EPSS
SaveExploits0References8
OSV
OSV
added 2023/04/04 9:7 p.m.42 views

CVE-2023-28842 moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.2AI score0.0144EPSS
SaveExploits0References10
Hewlett-Packard
Hewlett-Packard
added 2023/04/03 12:0 a.m.30 views

Certain HP Enterprise LaserJet and HP LaserJet Managed printers - Potential information disclosure

Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled with FutureSmart version 5.6. Update the printer firmware...

7.5CVSS6.7AI score0.00867EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/03/15 12:0 a.m.52 views

Ubuntu 22.10 : Linux kernel (KVM) vulnerabilities (USN-5950-1)

The remote Ubuntu 22.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5950-1 advisory. It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain...

7.8CVSS7.7AI score0.06346EPSS
SaveExploits7References16
Fedora
Fedora
added 2023/03/11 4:29 a.m.44 views

[SECURITY] Fedora 37 Update: strongswan-5.9.10-1.fc37

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

9.8CVSS8.9AI score0.02283EPSS
SaveExploits0
Fedora
Fedora
added 2023/03/11 3:58 a.m.39 views

[SECURITY] Fedora 38 Update: strongswan-5.9.10-1.fc38

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel...

9.8CVSS8.9AI score0.02283EPSS
SaveExploits0
Rows per page
Query Builder