docker vulnerabilities (Alpaquita)
34 vulnerabilities.
-
dockerAlpaquita No score -
dockerAlpaquita Distrust compromised intermediate certificates in crypto/x509 6.8 Medium -
dockerAlpaquita HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
dockerAlpaquita Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
dockerAlpaquita Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
dockerAlpaquita HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
dockerAlpaquita Malformed LLB file operation can crash buildkitd 6.9 Medium -
dockerAlpaquita BuildKit proxy CA cleanup can be disrupted by build steps 5.8 Medium -
dockerAlpaquita Crafted Git build source can bypass certain policy validation 6.0 Medium -
dockerAlpaquita Blind VXLAN injection into encrypted overlay networks from cluster peer 6.9 Medium -
dockerAlpaquita Docker Engine insecure-registry fallback via malicious DNS responses 7.6 High -
dockerAlpaquita Containerd has image-pull DoS via crafted OCI index graph amplification 6.9 Medium -
dockerAlpaquita Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 7.5 High -
dockerAlpaquita Moby: Race condition in docker cp allows bind mount redirection to host path 7.2 High -
dockerAlpaquita Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap 6.1 Medium -
dockerAlpaquita Docker: `PUT /containers/{id}/archive` executes container binary on the host 7.2 High -
dockerAlpaquita crypto: algif_aead - Revert to operating out-of-place 7.8 High -
dockerAlpaquita Moby: AuthZ plugin bypass with oversized request body 8.8 High -
dockerAlpaquita Moby: Off-by-one error in plugin privilege validation 6.8 Medium -
dockerAlpaquita BuildKit Git URL subdir component can cause access to restricted files 8.2 High -
dockerAlpaquita BuildKit vulnerable to malicious frontend causing file escape outside of storage root 8.4 High -
dockerAlpaquita gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
dockerAlpaquita Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 6.5 Medium -
dockerAlpaquita Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
dockerAlpaquita Moby's Firewalld reload removes bridge network isolation 3.3 Low -
dockerAlpaquita Moby's Firewalld reload makes published container ports accessible from remote hosts 5.1 Medium -
dockerAlpaquita Moby authz zero length regression 10.0 Critical -
dockerAlpaquita Moby IPv6 enabled on IPv4-only network interfaces 4.7 Medium -
dockerAlpaquita External DNS requests from 'internal' networks could lead to data exfiltration 5.9 Medium -
dockerAlpaquita Moby classic builder cache poisoning 6.9 Medium -
dockerAlpaquita BuildKit interactive containers API does not validate entitlements check 9.8 Critical -
dockerAlpaquita BuildKit possible host system access from mount stub cleaner 10.0 Critical -
dockerAlpaquita BuildKit possible race condition with accessing subpaths from cache mounts 8.7 High -
dockerAlpaquita BuildKit possible panic when incorrect parameters sent from frontend 5.3 Medium