Azure Linux 3.0 Security Update: moby-engine (CVE-2024-36620)

The version of moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36620 advisory. - moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

CVE-2024-36620 affecting package moby-engine for versions less than 25.0.3-8

CVE-2024-36620 affecting package moby-engine for versions less than 25.0.3-8. A patched version of the package is available...

SUSE CVE-2024-36620

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

CVE-2024-36620 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, amazon-cloudwatch-agent-operator-fips, pulumi, prometheus, vault, promxy-fips, promxy...

CVE-2024-36620 vulnerabilities

Vulnerabilities for packages: promxy, pulumi, amazon-cloudwatch-agent-operator...

CVE-2024-36620

creationtimestamp| type| source ---|---|--- 2024-11-29 18:14:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113567599618912394...

CVE-2024-36620

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...