PT-2025-31369

Name of the Vulnerable Software and Affected Versions Moby versions prior to 28.0.0 Moby version 25.0.13 Description Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products...

CVE-2023-45288 affecting package moby-engine for versions less than 25.0.3-10

CVE-2023-45288 affecting package moby-engine for versions less than 25.0.3-10. A patched version of the package is available...

CVE-2024-23650 affecting package moby-engine for versions less than 24.0.9-14

CVE-2024-23650 affecting package moby-engine for versions less than 24.0.9-14. A patched version of the package is available...

CVE-2024-28180 affecting package moby-containerd-cc for versions less than 1.7.7-9

CVE-2024-28180 affecting package moby-containerd-cc for versions less than 1.7.7-9. A patched version of the package is available...

CVE-2024-28180 affecting package moby-containerd for versions less than 1.6.26-9

CVE-2024-28180 affecting package moby-containerd for versions less than 1.6.26-9. A patched version of the package is available...

Azure Linux 3.0 Security Update: cert-manager / helm / moby-cli / moby-compose / moby-engine (CVE-2023-2253)

The version of cert-manager / helm / moby-cli / moby-compose / moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2253 advisory. - A flaw was found in the /v2/catalog endpoint in...

Azure Linux 3.0 Security Update: moby-engine (CVE-2024-41110)

The version of moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41110 advisory. - Moby is an open-source project created by Docker for software containerization. A security vulnerabilit...

Azure Linux 3.0 Security Update: golang / ig / moby-engine / skopeo (CVE-2022-2879)

The version of golang / ig / moby-engine / skopeo installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2879 advisory. - Reader.Read does not set a limit on the maximum size of file headers. A malicious...

Azure Linux 3.0 Security Update: docker-cli / moby-cli / moby-compose / moby-engine (CVE-2024-36623)

The version of docker-cli / moby-cli / moby-compose / moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36623 advisory. - moby through v25.0.3 has a Race Condition vulnerability in the...

Azure Linux 3.0 Security Update: moby-engine (CVE-2024-36621)

The version of moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36621 advisory. - moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The...

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2025-1171)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities

Summary QRadar Suite Software includes components with known vulnerabilities. These have been updated in the latest release and vulnerabilities have been addressed. Please follow the instructions in the Remediation/Fixes section below to update to the latest version. Vulnerability Details...

Race Condition Vulnerability

github.com/moby/moby is vulnerable to a Race Condition. The vulnerability is due to the lack of synchronization mechanisms to manage concurrent write operations in the streamformatter package, allowing multiple operations to occur simultaneously and potentially result in data corruption or...

CVE-2024-24786 affecting package moby-engine for versions less than 24.0.9-13

CVE-2024-24786 affecting package moby-engine for versions less than 24.0.9-13. A patched version of the package is available...

moby:FuzzDecompressStream: Crash in ___interceptor_pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5916070571999232 Project: moby Fuzzing Engine: libFuzzer Fuzz Target: FuzzDecompressStream Job Type: libfuzzerasanmoby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ab0e12b5790 Crash State: interceptorpthreadcreate...

CVE-2024-45337 affecting package moby-engine for versions less than 25.0.3-9

CVE-2024-45337 affecting package moby-engine for versions less than 25.0.3-9. A patched version of the package is available...

CVE-2024-45337 affecting package moby-engine for versions less than 24.0.9-12

CVE-2024-45337 affecting package moby-engine for versions less than 24.0.9-12. A patched version of the package is available...

CVE-2024-45337 affecting package moby-compose for versions less than 2.17.3-9

CVE-2024-45337 affecting package moby-compose for versions less than 2.17.3-9. A patched version of the package is available...

The vulnerability of the Moby container isolation system creation software, related to the swapping of the zero pointer, allows a intruder to trigger a service failure.

The vulnerability of the Moby container isolation system creation software is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...