1127 matches found
CVE-2023-2253 affecting package moby-engine for versions less than 20.10.27-1
CVE-2023-2253 affecting package moby-engine for versions less than 20.10.27-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-47108 affecting package moby-containerd-cc for versions less than 1.7.2-3
CVE-2023-47108 affecting package moby-containerd-cc for versions less than 1.7.2-3. A patched version of the package is available...
NewStart CGSL MAIN 5.04 : docker-ce Vulnerability (NS-SA-2023-0109)
The remote NewStart CGSL host, running version MAIN 5.04, has docker-ce packages installed that are affected by a vulnerability: - Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where supplementary groups are not set up...
AZL-32280 CVE-2023-48795 affecting package moby-engine for versions less than 20.10.27-1
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...
AZL-32224 CVE-2023-48795 affecting package moby-compose for versions less than 2.17.3-5
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...
AZL-32223 CVE-2023-48795 affecting package moby-cli for versions less than 20.10.27-2
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...
Amazon Linux 2 : docker (ALASECS-2023-028)
The version of docker installed on the remote host is prior to 20.10.7-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2023-028 advisory. A file permissions vulnerability was found in Moby Docker Engine. Copying files by using into a specially-crafted...
Amazon Linux 2 : containerd (ALASECS-2023-023)
The version of containerd installed on the remote host is prior to 1.4.13-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2023-023 advisory. A flaw was found in Moby Docker Engine, where containers were started incorrectly with non-empty inheritable Linux process...
AZL-31896 CVE-2023-47108 affecting package moby-containerd-cc for versions less than 1.7.2-3
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels net.peer.sock.addr and net.peer.sock.port that have unbound cardinality. It leads to the...
AZL-34995 CVE-2023-47108 affecting package moby-containerd-cc for versions less than 1.7.7-3
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels net.peer.sock.addr and net.peer.sock.port that have unbound cardinality. It leads to the...
Rocky Linux 8 : container-tools:3.0 (RLSA-2022:1565)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1565 advisory. - A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby Docker...
Rocky Linux 8 : container-tools:3.0 (RLSA-2022:1793)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:1793 advisory. - A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby Docker Engine where...
Fedora 39 : moby-engine (2023-b9c1d0e4c5)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b9c1d0e4c5 advisory. - Update moby-engine to 24.0.5 - Security fix for CVE-2021-41803 - Security fix for CVE-2023-28842 - Security fix for CVE-2023-28841 - Security fix...
Rocky Linux 8 : container-tools:2.0 (RLSA-2022:1566)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1566 advisory. - A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby Docker...
Amazon Linux 2 : docker (ALASECS-2023-013)
The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2023-013 advisory. A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the...
CVE-2023-39325 affecting package moby-containerd for versions less than 1.6.22-2
CVE-2023-39325 affecting package moby-containerd for versions less than 1.6.22-2. A patched version of the package is available...
CVE-2023-39325 affecting package moby-containerd-cc for versions less than 1.7.1-5
CVE-2023-39325 affecting package moby-containerd-cc for versions less than 1.7.1-5. A patched version of the package is available...
CVE-2023-39325 affecting package moby-compose for versions less than 2.17.2-5
CVE-2023-39325 affecting package moby-compose for versions less than 2.17.2-5. A patched version of the package is available...