docker.io vulnerabilities (Ubuntu)
66 vulnerabilities.
-
docker.ioUbuntu Malformed LLB file operation can crash buildkitd 6.9 Medium -
docker.ioUbuntu BuildKit proxy CA cleanup can be disrupted by build steps 5.8 Medium -
docker.ioUbuntu Crafted Git build source can bypass certain policy validation 6.0 Medium -
docker.ioUbuntu Oversized Dockerfile or .dockerignore can exhaust buildkitd memory 6.8 Medium -
docker.ioUbuntu Malformed MergeOp can crash the BuildKit daemon 6.9 Medium -
docker.ioUbuntu BuildKit improperly handles special files in build snapshots 6.0 Medium -
docker.ioUbuntu A malicious frontend can cause a daemon panic 5.7 Medium -
docker.ioUbuntu Cache poisoning via unvalidated image layer DiffIDs 7.5 High -
docker.ioUbuntu Container blob cache can accept unverified content 5.9 Medium -
docker.ioUbuntu Starting daemon with --cdi-disabled flag can lead to panic on specific builds 7.1 High -
docker.ioUbuntu Blind VXLAN injection into encrypted overlay networks from cluster peer 6.9 Medium -
docker.ioUbuntu Docker Engine insecure-registry fallback via malicious DNS responses 7.6 High -
docker.ioUbuntu Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race 8.7 High -
docker.ioUbuntu Tar extraction in moby/go-archive can write outside the destination directory via link following 7.1 High -
docker.ioUbuntu Possible panic when incorrect parameters sent from frontend 6.3 Medium -
docker.ioUbuntu LLB file operation can be tricked to remove /tmp directory contents 3.3 Low -
docker.ioUbuntu Git source checkout from a bundle file could lead to command injection 6.5 Medium -
docker.ioUbuntu Moby: Race condition in docker cp allows bind mount redirection to host path 7.2 High -
docker.ioUbuntu Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap 6.1 Medium -
docker.ioUbuntu Docker: `PUT /containers/{id}/archive` executes container binary on the host 7.2 High -
docker.ioUbuntu Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) 6.8 Medium -
docker.ioUbuntu Moby: AuthZ plugin bypass with oversized request body 8.8 High -
docker.ioUbuntu Moby: Off-by-one error in plugin privilege validation 6.8 Medium -
docker.ioUbuntu BuildKit Git URL subdir component can cause access to restricted files 8.2 High -
docker.ioUbuntu BuildKit vulnerable to malicious frontend causing file escape outside of storage root 8.4 High -
docker.ioUbuntu Moby's Firewalld reload removes bridge network isolation 3.3 Low -
docker.ioUbuntu Moby's Firewalld reload makes published container ports accessible from remote hosts 5.1 Medium -
docker.ioUbuntu Moby Race Condition vulnerability 8.1 High -
docker.ioUbuntu Moby Race Condition vulnerability 6.5 Medium -
docker.ioUbuntu Moby authz zero length regression 10.0 Critical -
docker.ioUbuntu External DNS requests from 'internal' networks could lead to data exfiltration 5.9 Medium -
docker.ioUbuntu Moby classic builder cache poisoning 6.9 Medium -
docker.ioUbuntu BuildKit interactive containers API does not validate entitlements check 9.8 Critical -
docker.ioUbuntu BuildKit possible host system access from mount stub cleaner 10.0 Critical -
docker.ioUbuntu BuildKit possible race condition with accessing subpaths from cache mounts 8.7 High -
docker.ioUbuntu moby/moby's dockerd daemon encrypted overlay network may be unauthenticated 7.5 High -
docker.ioUbuntu moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted 6.8 Medium -
docker.ioUbuntu moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated 6.8 Medium -
docker.ioUbuntu Moby vulnerability relating to supplementary group permissions 5.3 Medium -
docker.ioUbuntu Clarify Content-Type handling in OCI spec 3.0 Low -
docker.ioUbuntu Insufficiently restricted permissions on data directory in Docker Engine 6.3 Medium -
docker.ioUbuntu Docker CLI leaks private registry credentials to registry-1.docker.io 5.4 Medium -
docker.ioUbuntu `docker cp` allows unexpected chmod of host files 2.8 Low -
docker.ioUbuntu docker.io vulnerabilities No score -
docker.ioUbuntu privilege escalation in Moby 6.8 Medium -
docker.ioUbuntu Docker daemon crash during image pull of malicious image 6.5 Medium -
docker.ioUbuntu containerd can be coerced into leaking credentials during image pull 6.1 Medium -
docker.ioUbuntu Improper Input Validation in Docker Engine 6.0 Medium -
docker.ioUbuntu An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via... 9.8 Critical -
docker.ioUbuntu docker-credential-helpers before 0.6.3 has a double free in the List functions. 5.5 Medium - Show olderLoading…