docker vulnerabilities (Mageia)

26 vulnerabilities.

• docker Mageia External DNS requests from 'internal' networks could lead to data exfiltration CVE-2024-29018 Fix available 5.9 MediumMarch 20, 2024
• docker Mageia moby/moby's dockerd daemon encrypted overlay network may be unauthenticated CVE-2023-28840 Fix available 7.5 HighApril 4, 2023
• docker Mageia moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted CVE-2023-28841 Fix available 6.8 MediumApril 4, 2023
• docker Mageia moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated CVE-2023-28842 Fix available 6.8 MediumApril 4, 2023
• docker Mageia Credentials inlined to Git URLs could end up in provenance attestation in BuildKit CVE-2023-26054 Fix available 6.5 MediumMarch 6, 2023
• docker Mageia Consul Peering Imported Nodes/Services Leak CVE-2022-3920 Fix available 5.3 MediumNovember 15, 2022
• docker Mageia Moby vulnerability relating to supplementary group permissions CVE-2022-36109 Fix available 5.3 MediumSeptember 9, 2022
• docker Mageia Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector CVE-2022-29153 Fix available 7.5 HighApril 19, 2022
• docker Mageia Default inheritable capabilities for linux container should be empty CVE-2022-24769 Fix available 5.9 MediumMarch 24, 2022
• docker Mageia Insufficiently restricted permissions on data directory in Docker Engine CVE-2021-41091 Public exploitFix available 6.3 MediumOctober 4, 2021
• docker Mageia Docker CLI leaks private registry credentials to registry-1.docker.io CVE-2021-41092 Fix available 5.4 MediumOctober 4, 2021
• docker Mageia `docker cp` allows unexpected chmod of host files CVE-2021-41089 Fix available 2.8 LowOctober 4, 2021
• docker Mageia containerd can be coerced into leaking credentials during image pull CVE-2020-15157 Fix available 6.1 MediumOctober 15, 2020
• docker Mageia Improper Input Validation in Docker Engine CVE-2020-13401 Public exploitFix available 6.0 MediumJune 2, 2020
• docker Mageia docker-credential-helpers before 0.6.3 has a double free in the List functions. CVE-2019-1020014 Fix available 5.5 MediumJuly 29, 2019
• docker Mageia Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory... CVE-2018-20699 Fix available 4.9 MediumJanuary 12, 2019
• docker Mageia The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of... CVE-2018-16875 Public exploitFix available 5.9 MediumDecember 14, 2018
• docker Mageia In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory... CVE-2018-16874 Fix available 6.8 MediumDecember 14, 2018
• docker Mageia In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code... CVE-2018-16873 Fix available EPSS 66.3% 7.5 HighDecember 14, 2018
• docker Mageia The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does... CVE-2018-10892 Fix available 6.3 MediumJuly 6, 2018
• docker Mageia Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP) CVE-2017-16539 Fix available 5.9 MediumNovember 4, 2017
• docker Mageia tar-split memory exhaustion CVE-2017-14992 Fix available 6.5 MediumNovember 1, 2017
• docker Mageia Information Exposure in RunC CVE-2016-9962 Fix available 6.4 MediumJanuary 31, 2017
• docker Mageia Privilege Elevation in runc CVE-2016-3697 Fix available 7.8 HighApril 26, 2016
• docker Mageia Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and... CVE-2014-8179 Fix available 7.5 HighOctober 14, 2015
• docker Mageia Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique... CVE-2014-8178 Fix available 5.5 MediumOctober 14, 2015