208 matches found
CVE-2024-45337 affecting package moby-engine for versions less than 25.0.3-9
CVE-2024-45337 affecting package moby-engine for versions less than 25.0.3-9. A patched version of the package is available...
CVE-2024-45337 affecting package moby-engine for versions less than 24.0.9-12
CVE-2024-45337 affecting package moby-engine for versions less than 24.0.9-12. A patched version of the package is available...
CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-36621)
The version of moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36621 advisory. - moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The...
CVE-2024-36621 affecting package moby-engine for versions less than 24.0.9-11
CVE-2024-36621 affecting package moby-engine for versions less than 24.0.9-11. A patched version of the package is available...
CVE-2024-36623 affecting package moby-engine for versions less than 24.0.9-11
CVE-2024-36623 affecting package moby-engine for versions less than 24.0.9-11. A patched version of the package is available...
AZL-54320 CVE-2024-45337 affecting package moby-engine for versions less than 24.0.9-13
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...
AZL-54357 CVE-2024-45337 affecting package moby-engine for versions less than 25.0.3-9
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...
CVE-2024-36623 affecting package moby-engine for versions less than 25.0.3-8
CVE-2024-36623 affecting package moby-engine for versions less than 25.0.3-8. A patched version of the package is available...
CVE-2024-36621 affecting package moby-engine for versions less than 25.0.3-8
CVE-2024-36621 affecting package moby-engine for versions less than 25.0.3-8. A patched version of the package is available...
CVE-2024-36620 affecting package moby-engine for versions less than 25.0.3-8
CVE-2024-36620 affecting package moby-engine for versions less than 25.0.3-8. A patched version of the package is available...
CVE-2024-24786 affecting package moby-engine for versions less than 25.0.3-7
CVE-2024-24786 affecting package moby-engine for versions less than 25.0.3-7. A patched version of the package is available...
AZL-53824 CVE-2024-36623 affecting package moby-engine for versions less than 25.0.3-9
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes...
AZL-53819 CVE-2024-36623 affecting package moby-engine for versions less than 24.0.9-13
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes...
AZL-53810 CVE-2024-36621 affecting package moby-engine for versions less than 25.0.3-9
moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion...
AZL-53828 CVE-2024-36620 affecting package moby-engine for versions less than 25.0.3-9
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...
AZL-53813 CVE-2024-36621 affecting package moby-engine for versions less than 24.0.9-13
moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion...
Fedora 37 : moby-engine (2022-2c33bba286)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-2c33bba286 advisory. - Update to 20.10.20. - Mitigates CVE-2022-39253 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
AZL-52221 CVE-2024-51744 affecting package moby-engine for versions less than 24.0.9-17
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...