219 matches found
AZL-57401 CVE-2025-22869 affecting package moby-engine for versions less than 25.0.3-11
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...
AZL-57449 CVE-2025-22868 affecting package moby-engine for versions less than 24.0.9-15
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57473 CVE-2025-22869 affecting package moby-engine for versions less than 24.0.9-15
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...
CVE-2023-45288 affecting package moby-engine for versions less than 25.0.3-10
CVE-2023-45288 affecting package moby-engine for versions less than 25.0.3-10. A patched version of the package is available...
CVE-2024-23650 affecting package moby-engine for versions less than 24.0.9-14
CVE-2024-23650 affecting package moby-engine for versions less than 24.0.9-14. A patched version of the package is available...
Azure Linux 3.0 Security Update: moby-engine (CVE-2024-41110)
The version of moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41110 advisory. - Moby is an open-source project created by Docker for software containerization. A security vulnerabilit...
Azure Linux 3.0 Security Update: golang / ig / moby-engine / skopeo (CVE-2022-2879)
The version of golang / ig / moby-engine / skopeo installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2879 advisory. - Reader.Read does not set a limit on the maximum size of file headers. A malicious...
Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)
The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...
Azure Linux 3.0 Security Update: moby-engine (CVE-2024-36621)
The version of moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36621 advisory. - moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The...
Azure Linux 3.0 Security Update: docker-cli / moby-cli / moby-compose / moby-engine (CVE-2024-36623)
The version of docker-cli / moby-cli / moby-compose / moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36623 advisory. - moby through v25.0.3 has a Race Condition vulnerability in the...
CVE-2024-24786 affecting package moby-engine for versions less than 24.0.9-13
CVE-2024-24786 affecting package moby-engine for versions less than 24.0.9-13. A patched version of the package is available...
CVE-2024-45337 affecting package moby-engine for versions less than 25.0.3-9
CVE-2024-45337 affecting package moby-engine for versions less than 25.0.3-9. A patched version of the package is available...
CVE-2024-45337 affecting package moby-engine for versions less than 24.0.9-12
CVE-2024-45337 affecting package moby-engine for versions less than 24.0.9-12. A patched version of the package is available...
CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-36621)
The version of moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36621 advisory. - moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The...
CVE-2024-36623 affecting package moby-engine for versions less than 24.0.9-11
CVE-2024-36623 affecting package moby-engine for versions less than 24.0.9-11. A patched version of the package is available...
CVE-2024-36621 affecting package moby-engine for versions less than 24.0.9-11
CVE-2024-36621 affecting package moby-engine for versions less than 24.0.9-11. A patched version of the package is available...
AZL-54320 CVE-2024-45337 affecting package moby-engine for versions less than 24.0.9-13
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...
AZL-54357 CVE-2024-45337 affecting package moby-engine for versions less than 25.0.3-9
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...