GO-2024-3305 Moby Race Condition vulnerability in github.com/moby/moby

Moby Race Condition vulnerability in github.com/moby/moby...

GO-2024-3005 Moby authz zero length regression in github.com/moby/moby

Moby authz zero length regression in github.com/moby/moby...

Improper Authentication

github.com/moby/moby is vulnerable to Improper Authentication. The vulnerability is due to the Docker Engine handling of specially-crafted API requests, which causes authorization plugins to receive requests or responses without the body. Attackers can use this flaw to bypass AuthZ plugins and...

CVE-2024-24557

A vulnerability was found in github.com/moby/moby. The classic builder cache system in moby is vulnerable to cache poisoning if the image is built using a 'FROM scratch' in Dockerfile. This flaw allows an attacker who has knowledge of the Dockerfile to create a malicious cache that would be pulle...

Authorization Bypass

github.com/moby/moby is vulnerable to Authorization Bypass. Encrypted overlay networks accept cleartext VXLAN datagrams tagged with the VNI of the network, which allows remote attackers to arbitrary inject ethernet frames into the encrypted overlay network...

Denial Of Service (DoS)

github.com/moby/moby is vulnerable to Denial Of Service DoS. The vulnerability exists due to the lack of VXLAN encryption validation in bpf.go allowing an attacker to inject cleartext VXLAN datagrams in the encrypted overlay network which can cause an application crash...

Privilege Escalation

github.com/moby/moby is vulnerable to privilege escalation. Attempting to copy files to a malicious container using docker cp allows an attacker to change the permission for existing files in the host's system...

Denial Of Service (DoS)

github.com/moby/moby is vulnerable to denial of service DoS attacks. The vulnerability exists due to the lack of validation of cpuset-mems or cpuset-cpus, where a memory exhaustion could occur with a large integer...

Denial Of Service (DoS)

github.com/moby/moby is vulnerable to denial of service DoS attacks. The vulnerability exists when a large number of CPU units is provided which causes a DoS attack when the value is used...

Unauthorized Access

github.com/moby/moby is vulnerable to unauthorized access. A malicious user can write scsi remove-single-device to /proc/scsi/scsi, removing a scsi device from the system...