EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2023-1971)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where...

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2023-1949)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Open Source Dependency Vulnerability

Summary IBM Edge Application Manager 4.5 has resolved the vulnerability. Vulnerability Details CVEID:CVE-2022-36109 DESCRIPTION: Moby could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a flaw with the supplementary groups are not set up properly. By...

EulerOS 2.0 SP9 : docker-engine (EulerOS-SA-2023-1864)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where...

EulerOS 2.0 SP9 : docker-engine (EulerOS-SA-2023-1837)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where...

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2023-1837)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2023-1864)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-27561 affecting package moby-runc for versions less than 1.1.5-1

CVE-2023-27561 affecting package moby-runc for versions less than 1.1.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-28642 affecting package moby-runc for versions less than 1.1.5-1

CVE-2023-28642 affecting package moby-runc for versions less than 1.1.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-25809 affecting package moby-runc for versions less than 1.1.5-1

CVE-2023-25809 affecting package moby-runc for versions less than 1.1.5-1. An upgraded version of the package is available that resolves this issue...

Exploit for Incorrect Permission Assignment for Critical Resource in Mobyproject Moby

CVE-2021-41091 This exploit offers an in-depth look at the CV...

Medium: docker

Issue Overview: A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the supplementary group access setup. CVE-2022-36109 Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside the Docker...

Amazon Linux 2 : docker (ALASDOCKER-2023-024)

The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2023-024 advisory. A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the...

OESA-2023-1238 docker security update

Docker is an open source project to build, ship and run any application as a lightweight container. Security Fixes: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Mo...

CVE-2023-27561 affecting package moby-runc 1.1.2+azure-4

CVE-2023-27561 affecting package moby-runc 1.1.2+azure-4. An upgraded version of the package is available that resolves this issue...

CVE-2023-28642 affecting package moby-runc 1.1.2+azure-4

CVE-2023-28642 affecting package moby-runc 1.1.2+azure-4. An upgraded version of the package is available that resolves this issue...

CVE-2023-25809 affecting package moby-runc 1.1.2+azure-4

CVE-2023-25809 affecting package moby-runc 1.1.2+azure-4. An upgraded version of the package is available that resolves this issue...

Authorization Bypass

github.com/moby/moby is vulnerable to Authorization Bypass. Encrypted overlay networks accept cleartext VXLAN datagrams tagged with the VNI of the network, which allows remote attackers to arbitrary inject ethernet frames into the encrypted overlay network...

Denial Of Service (DoS)

github.com/moby/moby is vulnerable to Denial Of Service DoS. The vulnerability exists due to the lack of VXLAN encryption validation in bpf.go allowing an attacker to inject cleartext VXLAN datagrams in the encrypted overlay network which can cause an application crash...

NewStart CGSL CORE 5.05 / MAIN 5.05 : docker-ce Multiple Vulnerabilities (NS-SA-2023-0014)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has docker-ce packages installed that are affected by multiple vulnerabilities: - Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where attempting to...