Lucene search
+L

38 matches found

Cvelist
Cvelist
added 2023/04/04 9:12 p.m.33 views

CVE-2023-28841 moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.6AI score0.00691EPSS
SaveExploits1References11
OSV
OSV
added 2023/04/04 9:11 p.m.62 views

GHSA-6WRF-MXFJ-PF5P Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.8AI score0.0271EPSS
SaveExploits2References7
Vulnrichment
Vulnrichment
added 2023/04/04 9:7 p.m.5 views

CVE-2023-28842 moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.5AI score0.0144EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 3:46 a.m.5 views

SUSE CVE-2021-21285

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing...

5CVSS7.2AI score0.03287EPSS
SaveExploits0References31
Tenable Nessus
Tenable Nessus
added 2021/10/28 12:0 a.m.30 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : docker-ce Vulnerability (NS-SA-2021-0097)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has docker-ce packages installed that are affected by a vulnerability: - In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd...

6.5CVSS7AI score0.03287EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/02/26 12:0 a.m.9 views

Docker Resource Management Error Vulnerability (CNVD-2021-27276)

Docker is an open source application container engine from the American company Docker. It supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment and upgrade of applications through...

6.5CVSS6.5AI score0.03287EPSS
SaveExploits0References1
ArchLinux
ArchLinux
added 2021/02/06 12:0 a.m.101 views

[ASA-202102-12] docker: multiple issues

Arch Linux Security Advisory ASA-202102-12 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-21284 CVE-2021-21285 Package : docker Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1528 Summary ======= The package docker...

6.8CVSS2.8AI score0.03287EPSS
SaveExploits0References9
OSV
OSV
added 2021/02/02 6:15 p.m.2 views

DEBIAN-CVE-2021-21285

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing...

6.5CVSS6.9AI score0.03287EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/02/02 6:15 p.m.4 views

CVE-2021-21285

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing...

6.5CVSS6.9AI score0.03287EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2021/02/02 6:15 p.m.4 views

UBUNTU-CVE-2021-21285

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing...

6.5CVSS5.8AI score0.03287EPSS
SaveExploits0References9
CVE
CVE
added 2021/02/02 5:55 p.m.283 views

CVE-2021-21285

CVE-2021-21285 affects Docker dockerd when pulling an intentionally malformed Docker image manifest, causing a crash/denial of service. Affected are Docker versions prior to 9.03.15 and 20.10.3; patches exist in 19.03.15 and 20.10.3 to prevent the daemon from crashing. Connected sources also refe...

6.5CVSS6.6AI score0.03287EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.12 views

Docker 代码问题漏洞

Docker is an open source application container engine from the American company Docker. It supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment and upgrade of applications through...

6.8CVSS6.9AI score0.03287EPSS
SaveExploits0References26
Positive Technologies
Positive Technologies
added 2020/12/22 12:0 a.m.5 views

PT-2020-5849 · Docker +3 · Docker +3

Name of the Vulnerable Software and Affected Versions: Docker versions prior to 19.03.15 Docker versions prior to 20.10.3 Description: The issue is related to the incorrect processing of a Docker image manifest, which can cause the dockerd daemon to crash when an intentionally malformed image...

9.3CVSS6.4AI score0.97919EPSS
SaveExploits37References122
OSV
OSV
added 2020/08/10 2:15 p.m.5 views

UBUNTU-CVE-2020-13295

For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF...

8.8CVSS7.3AI score0.0116EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2020/08/10 1:32 p.m.66 views

CVE-2020-13295

Removed by vendor...

8.8CVSS8.5AI score0.0116EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/08/10 1:32 p.m.43 views

CVE-2020-13295

For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF...

5.4CVSS8.6AI score0.0116EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2019/07/29 4:18 p.m.148 views

Moderate: Red Hat Security Advisory: docker security and bug fix update

An update for docker is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS7.1AI score0.03427EPSS
SaveExploits2References3
Oracle linux
Oracle linux
added 2019/02/19 12:0 a.m.150 views

docker-engine security update

18.03.1.ol-0.0.12 - correct the version string of containerd 18.03.1.ol-0.0.11 - update runc for CVE-2019-5736 18.03.1.ol-0.0.10 - update Go to version 1.10.8 18.03.1.ol-0.0.9 - correct changelog 18.03.1.ol-0.0.8 - fix orabug 28452214 and orabug 28461404 18.03.1.ol-0.0.6 - obsolete/provide the...

9.3CVSS2.1AI score0.97919EPSS
SaveExploits34
Rows per page
Query Builder