2 matches found
Important: docker
Issue Overview: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of da...
10CVSS6.6AI score0.03446EPSS
SaveExploits0
Docker Desktop < 4.27.1 Multiple Vulnerabilities
The version of Docker Desktop for Mac is prior to 4.27.1. It is therefore affected by multiple vulnerabilities. - runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker...
10CVSS6.5AI score0.18923EPSS
SaveExploits20References8
20