CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

Prion•added 2023/04/04 10:15 p.m.•23 views

Code injection

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

2.6CVSS6.6AI score0.04189EPSS

Exploits1References11Affected Software1

Vulnrichment•added 2023/04/04 9:13 p.m.•4 views

CVE-2023-28840 moby/moby's dockerd daemon encrypted overlay network may be unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

7.5CVSS8.3AI score0.00652EPSS

Exploits1References10

CVE•added 2023/04/04 9:12 p.m.•690 views

CVE-2023-28841

CVE-2023-28841 describes a vulnerability in Moby/Docker Swarm encrypted overlay networks where, on affected platforms, encrypted overlay traffic can silently transmit unencrypted data due to how IPSec/VXLAN are enforced via iptables rules (using the xt_u32 module and VNI filtering). This can allo...

6.8CVSS7.4AI score0.04189EPSS

Exploits1References11Affected Software1