1303 matches found
AZL-35665 CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-5
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
AZL-35585 CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-8
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
AZL-35666 CVE-2024-24786 affecting package moby-engine for versions less than 25.0.3-7
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
AZL-39975 CVE-2024-24786 affecting package moby-engine for versions less than 24.0.9-13
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
AZL-39981 CVE-2024-24786 affecting package moby-cli for versions less than 24.0.9-6
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
AZL-35582 CVE-2024-24786 affecting package moby-buildx for versions less than 0.7.1-24
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
Summary Multiple vulnerabilities were addressed in IBM Cloud Pak for AIOps version 4.4.1 Vulnerability Details CVEID:CVE-2023-4641 DESCRIPTION: shadow-maint shadow-utils could allow a local authenticated attacker to obtain sensitive information, caused by failing to clean the buffer used to store...
CBL Mariner 2.0 Security Update: cri-tools / kubernetes / kubevirt / moby-runc (CVE-2024-21626M)
The version of cri-tools / kubernetes / kubevirt / moby-runc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21626M advisory. - NIST NVD Details CVE-2024-21626 Note that Nessus has not tested for...
CVE-2024-23652 affecting package moby-engine for versions less than 20.10.27-4
CVE-2024-23652 affecting package moby-engine for versions less than 20.10.27-4. A patched version of the package is available...
CVE-2024-23651 affecting package moby-engine for versions less than 20.10.27-4
CVE-2024-23651 affecting package moby-engine for versions less than 20.10.27-4. A patched version of the package is available...
CVE-2022-21698 affecting package moby-cli for versions less than 20.10.27-5
CVE-2022-21698 affecting package moby-cli for versions less than 20.10.27-5. A patched version of the package is available...
CVE-2021-44716 affecting package moby-cli for versions less than 20.10.27-5
CVE-2021-44716 affecting package moby-cli for versions less than 20.10.27-5. A patched version of the package is available...
Impact of Leaky Vessels Vulnerabilities (CVE-2024-21626, CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653)
The Palo Alto Networks Product Security Assurance team has evaluated the four vulnerabilities in Open Container Initiative's runc and Moby BuildKit software collectively known as "Leaky Vessels" as it relates to our products. While Cortex XSOAR 8, Cortex XSOAR 6 Hosted, and Prisma Cloud Compute...
CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3
CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...
CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3
CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...
CVE-2022-21698 affecting package moby-engine for versions less than 20.10.27-3
CVE-2022-21698 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...
CVE-2021-44716 affecting package moby-buildx for versions less than 0.7.1-18
CVE-2021-44716 affecting package moby-buildx for versions less than 0.7.1-18. A patched version of the package is available...
CVE-2024-23653 affecting package moby-buildx for versions less than 0.7.1-18
CVE-2024-23653 affecting package moby-buildx for versions less than 0.7.1-18. A patched version of the package is available...
GO-2024-2493 Host system file access in github.com/moby/buildkit
Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container...
