1127 matches found
CVE-2024-36623 affecting package moby-engine for versions less than 24.0.9-11
CVE-2024-36623 affecting package moby-engine for versions less than 24.0.9-11. A patched version of the package is available...
CVE-2024-36621 affecting package moby-engine for versions less than 24.0.9-11
CVE-2024-36621 affecting package moby-engine for versions less than 24.0.9-11. A patched version of the package is available...
CVE-2024-24786 affecting package moby-containerd for versions less than 1.6.26-8
CVE-2024-24786 affecting package moby-containerd for versions less than 1.6.26-8. A patched version of the package is available...
CVE-2024-24786 affecting package moby-buildx for versions less than 0.7.1-24
CVE-2024-24786 affecting package moby-buildx for versions less than 0.7.1-24. A patched version of the package is available...
NULL Pointer Dereference
github.com/moby/moby is vulnerable to a NULL Pointer Dereference. The vulnerability is due to improper handling of null pointers in the daemon/images/imagehistory.go file, which can lead to a crash or denial of service...
CBL Mariner 2.0 Security Update: docker-cli / moby-cli / moby-compose / moby-engine (CVE-2024-36623)
The version of docker-cli / moby-cli / moby-compose / moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36623 advisory. - moby through v25.0.3 has a Race Condition vulnerability in the...
CVE-2024-36623 affecting package moby-cli for versions less than 24.0.9-5
CVE-2024-36623 affecting package moby-cli for versions less than 24.0.9-5. A patched version of the package is available...
CVE-2024-36623 affecting package moby-compose for versions less than 2.17.3-8
CVE-2024-36623 affecting package moby-compose for versions less than 2.17.3-8. A patched version of the package is available...
OESA-2024-2557 docker security update
Docker is an open source project to build, ship and run any application as a lightweight container. Security Fixes: moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or...
OESA-2024-2555 docker security update
Docker is an open source project to build, ship and run any application as a lightweight container. Security Fixes: moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or...
OESA-2024-2556 docker security update
Docker is an open source project to build, ship and run any application as a lightweight container. Security Fixes: moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or...
moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion.
...
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
...
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
...
AZL-54320 CVE-2024-45337 affecting package moby-engine for versions less than 24.0.9-13
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...
AZL-54357 CVE-2024-45337 affecting package moby-engine for versions less than 25.0.3-9
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...
AZL-54286 CVE-2024-45337 affecting package moby-compose for versions less than 2.17.3-9
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...
CVE-2024-36623 affecting package moby-engine for versions less than 25.0.3-8
CVE-2024-36623 affecting package moby-engine for versions less than 25.0.3-8. A patched version of the package is available...