CVE-2021-44716 affecting package moby-cli for versions less than 20.10.27-5

CVE-2021-44716 affecting package moby-cli for versions less than 20.10.27-5. A patched version of the package is available...

CVE-2024-23651 affecting package moby-engine for versions less than 20.10.27-4

CVE-2024-23651 affecting package moby-engine for versions less than 20.10.27-4. A patched version of the package is available...

CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3

CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...

CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3

CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...

CVE-2024-23653 affecting package moby-buildx for versions less than 0.7.1-18

CVE-2024-23653 affecting package moby-buildx for versions less than 0.7.1-18. A patched version of the package is available...

CVE-2021-44716 affecting package moby-buildx for versions less than 0.7.1-18

CVE-2021-44716 affecting package moby-buildx for versions less than 0.7.1-18. A patched version of the package is available...

CVE-2022-21698 affecting package moby-engine for versions less than 20.10.27-3

CVE-2022-21698 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is available...

GO-2024-2493 Host system file access in github.com/moby/buildkit

Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container...

Moby classic builder cache poisoning

...

CVE-2024-23653 affecting package moby-cli for versions less than 20.10.27-3

CVE-2024-23653 affecting package moby-cli for versions less than 20.10.27-3. A patched version of the package is available...

The vulnerability of the ImageBuild() function in the software for creating containerized systems called Moby allows a attacker to execute a cache poisoning attack.

The vulnerability of the ImageBuild function in the Moby containerized system creation software is related to a lack of mechanisms for verifying the data source during the processing of endpoints. Exploiting this vulnerability could allow an attacker to execute a cache poisoning attack...

CVE-2022-21698 affecting package moby-buildx for versions less than 0.7.1-16

CVE-2022-21698 affecting package moby-buildx for versions less than 0.7.1-16. A patched version of the package is available...

Cache Poisoning

Moby is vulnerable to Cache Poisoning. The vulnerability is due to improper cache configuration when the image is built FROM scratch. This issue can be exploited by an attacker to poison the cache and force a user to pull a specially crafted image. Note that 23.0+ users are only affected if they...

CVE-2024-24557

A vulnerability was found in github.com/moby/moby. The classic builder cache system in moby is vulnerable to cache poisoning if the image is built using a 'FROM scratch' in Dockerfile. This flaw allows an attacker who has knowledge of the Dockerfile to create a malicious cache that would be pulle...

CVE-2024-21626 affecting package moby-runc for versions less than 1.1.9-4

CVE-2024-21626 affecting package moby-runc for versions less than 1.1.9-4. A patched version of the package is available...

AZL-35002 CVE-2024-24557 affecting package moby-engine for versions less than 25.0.3-1

Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions most important being HEALTHCHECK and ONBUILD would not cause a cache miss. An...

DEBIAN-CVE-2024-24557

Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions most important being HEALTHCHECK and ONBUILD would not cause a cache miss. An...

AZL-34275 CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3

Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions most important being HEALTHCHECK and ONBUILD would not cause a cache miss. An...

UBUNTU-CVE-2024-24557

Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions most important being HEALTHCHECK and ONBUILD would not cause a cache miss. An...

Design/Logic Flaw

Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions most important being HEALTHCHECK and ONBUILD would not cause a cache miss. An...