docker.io-app vulnerabilities (Ubuntu)
44 vulnerabilities.
-
docker.io-appUbuntu Malicious client could set xattr value outside of BuildKit state directory 4.5 Medium -
docker.io-appUbuntu Possible panic from Git source resolver 6.7 Medium -
docker.io-appUbuntu Bake filesystem path entitlements approval can be skipped in some multi-target builds 5.6 Medium -
docker.io-appUbuntu Bake filesystem path entitlements approval can be skipped for path using basename prefix 1.8 Low -
docker.io-appUbuntu Malformed LLB file operation can crash buildkitd 6.9 Medium -
docker.io-appUbuntu BuildKit proxy CA cleanup can be disrupted by build steps 5.8 Medium -
docker.io-appUbuntu Crafted Git build source can bypass certain policy validation 6.0 Medium -
docker.io-appUbuntu Oversized Dockerfile or .dockerignore can exhaust buildkitd memory 6.8 Medium -
docker.io-appUbuntu Malformed MergeOp can crash the BuildKit daemon 6.9 Medium -
docker.io-appUbuntu BuildKit improperly handles special files in build snapshots 6.0 Medium -
docker.io-appUbuntu A malicious frontend can cause a daemon panic 5.7 Medium -
docker.io-appUbuntu Cache poisoning via unvalidated image layer DiffIDs 7.5 High -
docker.io-appUbuntu Container blob cache can accept unverified content 5.9 Medium -
docker.io-appUbuntu Starting daemon with --cdi-disabled flag can lead to panic on specific builds 7.1 High -
docker.io-appUbuntu Blind VXLAN injection into encrypted overlay networks from cluster peer 6.9 Medium -
docker.io-appUbuntu Docker Engine insecure-registry fallback via malicious DNS responses 7.6 High -
docker.io-appUbuntu Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race 8.7 High -
docker.io-appUbuntu Tar extraction in moby/go-archive can write outside the destination directory via link following 7.1 High -
docker.io-appUbuntu Possible panic when incorrect parameters sent from frontend 6.3 Medium -
docker.io-appUbuntu LLB file operation can be tricked to remove /tmp directory contents 3.3 Low -
docker.io-appUbuntu Git source checkout from a bundle file could lead to command injection 6.5 Medium -
docker.io-appUbuntu Moby: Race condition in docker cp allows bind mount redirection to host path 7.2 High -
docker.io-appUbuntu Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap 6.1 Medium -
docker.io-appUbuntu Docker: `PUT /containers/{id}/archive` executes container binary on the host 7.2 High -
docker.io-appUbuntu Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) 6.8 Medium -
docker.io-appUbuntu Moby: AuthZ plugin bypass with oversized request body 8.8 High -
docker.io-appUbuntu Moby: Off-by-one error in plugin privilege validation 6.8 Medium -
docker.io-appUbuntu BuildKit Git URL subdir component can cause access to restricted files 8.2 High -
docker.io-appUbuntu BuildKit vulnerable to malicious frontend causing file escape outside of storage root 8.4 High -
docker.io-appUbuntu Moby's Firewalld reload removes bridge network isolation 3.3 Low -
docker.io-appUbuntu Moby's Firewalld reload makes published container ports accessible from remote hosts 5.1 Medium -
docker.io-appUbuntu Moby Race Condition vulnerability 8.1 High -
docker.io-appUbuntu Moby Race Condition vulnerability 6.5 Medium -
docker.io-appUbuntu Moby authz zero length regression 10.0 Critical -
docker.io-appUbuntu Moby IPv6 enabled on IPv4-only network interfaces 4.7 Medium -
docker.io-appUbuntu External DNS requests from 'internal' networks could lead to data exfiltration 5.9 Medium -
docker.io-appUbuntu Moby classic builder cache poisoning 6.9 Medium -
docker.io-appUbuntu BuildKit interactive containers API does not validate entitlements check 9.8 Critical -
docker.io-appUbuntu BuildKit possible host system access from mount stub cleaner 10.0 Critical -
docker.io-appUbuntu BuildKit possible race condition with accessing subpaths from cache mounts 8.7 High -
docker.io-appUbuntu BuildKit possible panic when incorrect parameters sent from frontend 5.3 Medium -
docker.io-appUbuntu moby/moby's dockerd daemon encrypted overlay network may be unauthenticated 7.5 High -
docker.io-appUbuntu moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted 6.8 Medium -
docker.io-appUbuntu moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated 6.8 Medium