1406 matches found
Azure Linux 3.0 Security Update: moby-engine (CVE-2024-36620)
The version of moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36620 advisory. - moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...
Astra Linux – Vulnerability in docker.io-app
Moby v25.0.0 – v26.0.2 is vulnerable to NULL Pointer Dereference attacks through the daemon/images/imagehistory.go module...
Security Bulletin: Firewalld Reload Breaks Docker Bridge Network Isolation in Moby (Pre-28.0.0), affects watsonx.data
Summary Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: docker (UTSA-2026-000514)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000514 advisory. Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. In...
Security Bulletin: Firewalld Reload Bypasses Localhost Port Restrictions in Moby (Docker Engine) Prior to 28.3.3, affects watsonx.data
Summary Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it removes all iptables rules...
[SECURITY] Fedora 42 Update: moby-engine-29.1.3-1.fc42
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...
[SECURITY] Fedora 43 Update: moby-engine-29.1.3-1.fc43
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...
Fedora: Security Advisory (FEDORA-2025-2f6ca95a74)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-d39f46567c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 43 : moby-engine (2025-d39f46567c)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d39f46567c advisory. - Update to release v29.1.3 - Resolves: rhbz2417969 - Resolves CVE-2024-25621: rhbz2419019, rhbz2419046, rhbz2419442 - Upstream new features and fix...
Fedora 42 : moby-engine (2025-2f6ca95a74)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2f6ca95a74 advisory. - Update to release v29.1.3 - Resolves: rhbz2417969 - Resolves CVE-2024-25621: rhbz2419019, rhbz2419046, rhbz2419442 - Upstream new features and fix...
CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27
CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27. A patched version of the package is available...
CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13
CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13. A patched version of the package is available...
CVE-2025-58183 affecting package moby-engine for versions less than 24.0.9-19
CVE-2025-58183 affecting package moby-engine for versions less than 24.0.9-19. A patched version of the package is available...
CVE-2025-58183 affecting package moby-engine for versions less than 25.0.3-14
CVE-2025-58183 affecting package moby-engine for versions less than 25.0.3-14. A patched version of the package is available...
Fedora 44 : moby-engine (2025-2ca3289343)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2ca3289343 advisory. Automatic update for moby-engine-29.1.3-1.fc44. Changelog Fri Dec 12 2025 Bradley G Smith - 29.1.3-1 - Update to release v29.1.3 - Resolves:...
Security Bulletin: Moby Multiple Concurrency and NULL Pointer Dereference Vulnerabilities Leading to DoS and Data Corruption, affects watsonx.data
Summary Multiple vulnerabilities affect Moby across versions 25.x–26.0.2, including a NULL pointer dereference in daemon/images/imagehistory.go v25.0.0–v26.0.2 that can crash the daemon, a race condition in builder/builder-next/adapters/snapshot/layer.go v25.0.5 that allows concurrent builds to...
AZL-71632 CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...
AZL-71629 CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...