docker vulnerabilities (Alpine)
44 vulnerabilities.
-
dockerAlpine Distrust compromised intermediate certificates in crypto/x509 6.8 Medium -
dockerAlpine Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
dockerAlpine Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
dockerAlpine HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
dockerAlpine Root.Mkdir(All) can follow junctions out of the root on Windows in os 9.8 Critical -
dockerAlpine Blind VXLAN injection into encrypted overlay networks from cluster peer 6.9 Medium -
dockerAlpine Docker Engine insecure-registry fallback via malicious DNS responses 7.6 High -
dockerAlpine Containerd has image-pull DoS via crafted OCI index graph amplification 6.9 Medium -
dockerAlpine Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap 6.1 Medium -
dockerAlpine Docker: `PUT /containers/{id}/archive` executes container binary on the host 7.2 High -
dockerAlpine drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() 7.8 High -
dockerAlpine crypto: algif_aead - Revert to operating out-of-place 7.8 High -
dockerAlpine Moby: AuthZ plugin bypass with oversized request body 8.8 High -
dockerAlpine Moby: Off-by-one error in plugin privilege validation 6.8 Medium -
dockerAlpine BuildKit Git URL subdir component can cause access to restricted files 8.2 High -
dockerAlpine BuildKit vulnerable to malicious frontend causing file escape outside of storage root 8.4 High -
dockerAlpine Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 6.5 Medium -
dockerAlpine Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
dockerAlpine Moby's Firewalld reload makes published container ports accessible from remote hosts 5.1 Medium -
dockerAlpine Moby authz zero length regression 10.0 Critical -
dockerAlpine Moby IPv6 enabled on IPv4-only network interfaces 4.7 Medium -
dockerAlpine Moby classic builder cache poisoning 6.9 Medium -
dockerAlpine BuildKit interactive containers API does not validate entitlements check 9.8 Critical -
dockerAlpine BuildKit possible host system access from mount stub cleaner 10.0 Critical -
dockerAlpine BuildKit possible race condition with accessing subpaths from cache mounts 8.7 High -
dockerAlpine BuildKit possible panic when incorrect parameters sent from frontend 5.3 Medium -
dockerAlpine moby/moby's dockerd daemon encrypted overlay network may be unauthenticated 7.5 High -
dockerAlpine moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted 6.8 Medium -
dockerAlpine moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated 6.8 Medium -
dockerAlpine Credentials inlined to Git URLs could end up in provenance attestation in BuildKit 6.5 Medium -
dockerAlpine Git subject to exposure of sensitive information via local clone of symbolic links 5.5 Medium -
dockerAlpine Moby vulnerability relating to supplementary group permissions 5.3 Medium -
dockerAlpine golang.org/x/sys/unix has Incorrect privilege reporting in syscall 5.3 Medium -
dockerAlpine Default inheritable capabilities for linux container should be empty 5.9 Medium -
dockerAlpine Clarify Content-Type handling in OCI spec 3.0 Low -
dockerAlpine Insufficiently restricted permissions on data directory in Docker Engine 6.3 Medium -
dockerAlpine Docker CLI leaks private registry credentials to registry-1.docker.io 5.4 Medium -
dockerAlpine `docker cp` allows unexpected chmod of host files 2.8 Low -
dockerAlpine privilege escalation in Moby 6.8 Medium -
dockerAlpine Docker daemon crash during image pull of malicious image 6.5 Medium -
dockerAlpine containerd-shim API Exposed to Host Network Containers 5.2 Medium -
dockerAlpine Improper Input Validation in Docker Engine 6.0 Medium -
dockerAlpine Moby Docker cp broken with debian containers 9.8 Critical -
dockerAlpine Secret insertion into debug log in Docker 7.5 High