CVE-2021-41091

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where the data directory typically /var/lib/docker contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traver...

CVE-2021-41089

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem,...

Amazon Linux AMI : docker (ALAS-2021-1537)

The version of docker installed on the remote host is prior to 20.10.7-3.71. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1537 advisory. A bug was found in Moby Docker Engine where attempting to copy files using docker cp into a specially- crafted containe...

CVE-2021-32760 affecting package moby-containerd 1.4.4+azure-6

CVE-2021-32760 affecting package moby-containerd 1.4.4+azure-6. A patched version of the package is available...

CVE-2021-21334 affecting package moby-containerd 1.4.4-2

CVE-2021-21334 affecting package moby-containerd 1.4.4-2. An upgraded version of the package is available that resolves this issue...

privilege escalation in Moby

...

Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0 1.10.3 17.03.0 17.03.1 17.03.2 17.06.0 17.06.1 17.06.2 17.09.0 and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload aka gzip bombing.

...

CVE-2021-21284 affecting package moby-cli 19.03.15-2

CVE-2021-21284 affecting package moby-cli 19.03.15-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-21285 affecting package moby-cli 19.03.15-2

CVE-2021-21285 affecting package moby-cli 19.03.15-2. An upgraded version of the package is available that resolves this issue...

CVE-2020-27534 affecting package moby-buildx 0.4.1-3

CVE-2020-27534 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2019-13139 affecting package moby-buildx 0.4.1-3

CVE-2019-13139 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-8179 affecting package moby-buildx 0.4.1-3

CVE-2014-8179 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-5277 affecting package moby-buildx 0.4.1-3

CVE-2014-5277 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2015-3627 affecting package moby-buildx 0.4.1-3

CVE-2015-3627 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-0048 affecting package moby-buildx 0.4.1-3

CVE-2014-0048 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2019-5736 affecting package moby-buildx 0.4.1-3

CVE-2019-5736 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-6407 affecting package moby-buildx 0.4.1-3

CVE-2014-6407 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-0047 affecting package moby-buildx 0.4.1-3

CVE-2014-0047 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2017-14992 affecting package moby-buildx 0.4.1-3

CVE-2017-14992 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2021-21285 affecting package moby-buildx 0.4.1-3

CVE-2021-21285 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...