1097 matches found
AZL-35585 CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-8
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
AZL-35584 CVE-2024-24786 affecting package moby-containerd for versions less than 1.6.26-8
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
AZL-35583 CVE-2024-24786 affecting package moby-compose for versions less than 2.17.3-5
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
AZL-35666 CVE-2024-24786 affecting package moby-engine for versions less than 25.0.3-7
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
AZL-39975 CVE-2024-24786 affecting package moby-engine for versions less than 24.0.9-13
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
AZL-35665 CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-5
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
Summary Multiple vulnerabilities were addressed in IBM Cloud Pak for AIOps version 4.4.1 Vulnerability Details CVEID:CVE-2023-4641 DESCRIPTION: shadow-maint shadow-utils could allow a local authenticated attacker to obtain sensitive information, caused by failing to clean the buffer used to store...
CBL Mariner 2.0 Security Update: cri-tools / kubernetes / kubevirt / moby-runc (CVE-2024-21626M)
The version of cri-tools / kubernetes / kubevirt / moby-runc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21626M advisory. - NIST NVD Details CVE-2024-21626 Note that Nessus has not tested for...
CVE-2024-23652 affecting package moby-engine for versions less than 20.10.27-4
CVE-2024-23652 affecting package moby-engine for versions less than 20.10.27-4. A patched version of the package is available...
CVE-2022-21698 affecting package moby-cli for versions less than 20.10.27-5
CVE-2022-21698 affecting package moby-cli for versions less than 20.10.27-5. A patched version of the package is available...
CVE-2024-23651 affecting package moby-engine for versions less than 20.10.27-4
CVE-2024-23651 affecting package moby-engine for versions less than 20.10.27-4. A patched version of the package is available...
CVE-2021-44716 affecting package moby-cli for versions less than 20.10.27-5
CVE-2021-44716 affecting package moby-cli for versions less than 20.10.27-5. A patched version of the package is available...
CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3
CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...
CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3
CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...
CVE-2021-44716 affecting package moby-buildx for versions less than 0.7.1-18
CVE-2021-44716 affecting package moby-buildx for versions less than 0.7.1-18. A patched version of the package is available...
CVE-2024-23653 affecting package moby-buildx for versions less than 0.7.1-18
CVE-2024-23653 affecting package moby-buildx for versions less than 0.7.1-18. A patched version of the package is available...
CVE-2022-21698 affecting package moby-engine for versions less than 20.10.27-3
CVE-2022-21698 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...
GO-2024-2493 Host system file access in github.com/moby/buildkit
Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container...
