moby-engine vulnerabilities (Azure Linux)
70 vulnerabilities.
moby-engineAzure LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 Highmoby-engineAzure LinuxMoby classic builder cache poisoning6.9 Mediummoby-engineAzure LinuxBuildKit interactive containers API does not validate entitlements check9.8 Criticalmoby-engineAzure LinuxBuildKit possible host system access from mount stub cleaner10.0 Criticalmoby-engineAzure LinuxBuildKit possible race condition with accessing subpaths from cache mounts8.7 Highmoby-engineAzure LinuxBuildKit possible panic when incorrect parameters sent from frontend5.3 Mediummoby-engineAzure Linuxrunc container breakout through process.cwd trickery and leaked fds8.6 Highmoby-engineAzure LinuxPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Mediummoby-engineAzure LinuxOpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics7.5 Highmoby-engineAzure LinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highmoby-engineAzure Linuxcontainerd OCI image importer memory exhaustion6.2 Mediummoby-engineAzure LinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediummoby-engineAzure LinuxUnbounded memory consumption when reading headers in archive/tar7.5 Highmoby-engineAzure Linuxgolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 Mediummoby-engineAzure LinuxUncontrolled Resource Consumption in promhttp7.5 Highmoby-engineAzure Linuxgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 Highmoby-engineAzure LinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical