Fedora: Security Advisory (FEDORA-2025-113fc513c3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-9e2840094a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : moby-engine (2025-113fc513c3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-113fc513c3 advisory. Update to release v28.3.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 42 : moby-engine (2025-9e2840094a)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-9e2840094a advisory. Update to release v28.3.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 43 : moby-engine (2025-a11b58986f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a11b58986f advisory. Automatic update for moby-engine-28.2.2-1.fc43. Changelog Fri May 30 2025 Bradley G Smith - 28.2.2-1 - Update to release v28.2.2 - Resolves: rhbz...

CVE-2024-51744 affecting package moby-engine for versions less than 25.0.3-13

CVE-2024-51744 affecting package moby-engine for versions less than 25.0.3-13. A patched version of the package is available...

CVE-2024-51744 affecting package moby-engine for versions less than 24.0.9-17

CVE-2024-51744 affecting package moby-engine for versions less than 24.0.9-17. A patched version of the package is available...

CVE-2025-30204 affecting package moby-engine for versions less than 24.0.9-16

CVE-2025-30204 affecting package moby-engine for versions less than 24.0.9-16. A patched version of the package is available...

CVE-2025-30204 affecting package moby-engine for versions less than 25.0.3-12

CVE-2025-30204 affecting package moby-engine for versions less than 25.0.3-12. A patched version of the package is available...

Azure Linux 3.0 Security Update: moby-engine (CVE-2024-29018)

The version of moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29018 advisory. - Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, an...

CVE-2025-22869 affecting package moby-engine for versions less than 25.0.3-11

CVE-2025-22869 affecting package moby-engine for versions less than 25.0.3-11. A patched version of the package is available...

CVE-2025-22868 affecting package moby-engine for versions less than 25.0.3-11

CVE-2025-22868 affecting package moby-engine for versions less than 25.0.3-11. A patched version of the package is available...

CVE-2025-22868 affecting package moby-engine for versions less than 24.0.9-15

CVE-2025-22868 affecting package moby-engine for versions less than 24.0.9-15. A patched version of the package is available...

CVE-2025-22869 affecting package moby-engine for versions less than 24.0.9-15

CVE-2025-22869 affecting package moby-engine for versions less than 24.0.9-15. A patched version of the package is available...

AZL-59217 CVE-2025-30204 affecting package moby-engine for versions less than 24.0.9-16

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

AZL-59180 CVE-2025-30204 affecting package moby-engine for versions less than 25.0.3-12

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

AZL-57473 CVE-2025-22869 affecting package moby-engine for versions less than 24.0.9-15

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57449 CVE-2025-22868 affecting package moby-engine for versions less than 24.0.9-15

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57363 CVE-2025-22868 affecting package moby-engine for versions less than 25.0.3-11

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57401 CVE-2025-22869 affecting package moby-engine for versions less than 25.0.3-11

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...