CVE-2024-23651 affecting package moby-engine for versions less than 25.0.3-1

CVE-2024-23651 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-23650 affecting package moby-engine for versions less than 25.0.3-1

CVE-2024-23650 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-23653 affecting package moby-engine for versions less than 25.0.3-1

CVE-2024-23653 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-44716 affecting package moby-engine for versions less than 25.0.3-1

CVE-2021-44716 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-2253 affecting package moby-engine for versions less than 25.0.3-1

CVE-2023-2253 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-44487 affecting package moby-engine for versions less than 25.0.3-1

CVE-2023-44487 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-23651)

The version of moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23651 advisory. - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and...

CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-23652)

The version of moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23652 advisory. - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and...

AZL-35666 CVE-2024-24786 affecting package moby-engine for versions less than 25.0.3-7

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-39975 CVE-2024-24786 affecting package moby-engine for versions less than 24.0.9-13

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2024-23651 affecting package moby-engine for versions less than 20.10.27-4

CVE-2024-23651 affecting package moby-engine for versions less than 20.10.27-4. A patched version of the package is available...

CVE-2024-23652 affecting package moby-engine for versions less than 20.10.27-4

CVE-2024-23652 affecting package moby-engine for versions less than 20.10.27-4. A patched version of the package is available...

CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3

CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...

CVE-2022-21698 affecting package moby-engine for versions less than 20.10.27-3

CVE-2022-21698 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...

CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3

CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...

AZL-34275 CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3

Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions most important being HEALTHCHECK and ONBUILD would not cause a cache miss. An...

AZL-35002 CVE-2024-24557 affecting package moby-engine for versions less than 25.0.3-1

Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions most important being HEALTHCHECK and ONBUILD would not cause a cache miss. An...

AZL-34084 CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask...

AZL-34085 CVE-2024-23651 affecting package moby-engine for versions less than 20.10.27-4

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessibl...

AZL-34086 CVE-2024-23652 affecting package moby-engine for versions less than 20.10.27-4

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the...