AZL-39229 CVE-2023-45288 affecting package moby-engine for versions less than 24.0.9-2

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-38878 CVE-2023-45288 affecting package moby-engine for versions less than 25.0.3-10

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-40034 CVE-2024-29018 affecting package moby-engine for versions less than 24.0.9-9

Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature i...

AZL-36900 CVE-2024-29018 affecting package moby-engine for versions less than 25.0.3-6

Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature i...

CVE-2023-2253 affecting package moby-engine for versions less than 25.0.3-1

CVE-2023-2253 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-23650 affecting package moby-engine for versions less than 25.0.3-1

CVE-2024-23650 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-25153 affecting package moby-engine for versions less than 20.10.25-3

CVE-2023-25153 affecting package moby-engine for versions less than 20.10.25-3. A patched version of the package is available...

CVE-2024-23651 affecting package moby-engine for versions less than 25.0.3-1

CVE-2024-23651 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-44487 affecting package moby-engine for versions less than 25.0.3-1

CVE-2023-44487 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-29526 affecting package moby-engine for versions less than 25.0.3-1

CVE-2022-29526 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21698 affecting package moby-engine for versions less than 25.0.3-1

CVE-2022-21698 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-44716 affecting package moby-engine for versions less than 25.0.3-1

CVE-2021-44716 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24557 affecting package moby-engine for versions less than 25.0.3-1

CVE-2024-24557 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41717 affecting package moby-engine for versions less than 25.0.3-1

CVE-2022-41717 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-23653 affecting package moby-engine for versions less than 25.0.3-1

CVE-2024-23653 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-23652 affecting package moby-engine for versions less than 25.0.3-1

CVE-2024-23652 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21626 affecting package moby-engine for versions less than 25.0.3-1

CVE-2024-21626 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-23651)

The version of moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23651 advisory. - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and...

CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-23652)

The version of moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23652 advisory. - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and...

AZL-39975 CVE-2024-24786 affecting package moby-engine for versions less than 24.0.9-13

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...