docker vulnerabilities (openEuler)

22 vulnerabilities.

• docker openEuler Docker Engine insecure-registry fallback via malicious DNS responses CVE-2026-92543 Fix available 7.6 HighOctober 1, 2026
• docker openEuler Tar extraction in moby/go-archive can write outside the destination directory via link following CVE-2026-17106 Public exploitFix available 7.1 HighAugust 18, 2026
• docker openEuler Moby: Race condition in docker cp allows bind mount redirection to host path CVE-2026-42306 Fix available 7.2 HighMay 18, 2026
• docker openEuler Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap CVE-2026-41568 Fix available 6.1 MediumMay 18, 2026
• docker openEuler Moby: AuthZ plugin bypass with oversized request body CVE-2026-34040 Public exploitFix available 8.8 HighMarch 27, 2026
• docker openEuler Moby: Off-by-one error in plugin privilege validation CVE-2026-33997 Fix available 6.8 MediumMarch 27, 2026
• docker openEuler Moby Race Condition vulnerability CVE-2024-36623 Fix available 8.1 HighNovember 29, 2024
• docker openEuler Moby Race Condition vulnerability CVE-2024-36621 Fix available 6.5 MediumNovember 29, 2024
• docker openEuler Moby authz zero length regression CVE-2024-41110 Public exploitFix available EPSS 16.5% 10.0 CriticalJuly 24, 2024
• docker openEuler Moby IPv6 enabled on IPv4-only network interfaces CVE-2024-32473 Fix available 4.7 MediumApril 18, 2024
• docker openEuler External DNS requests from 'internal' networks could lead to data exfiltration CVE-2024-29018 Fix available 5.9 MediumMarch 20, 2024
• docker openEuler Moby classic builder cache poisoning CVE-2024-24557 Fix available 6.9 MediumFebruary 1, 2024
• docker openEuler moby/moby's dockerd daemon encrypted overlay network may be unauthenticated CVE-2023-28840 Fix available 7.5 HighApril 4, 2023
• docker openEuler moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted CVE-2023-28841 Fix available 6.8 MediumApril 4, 2023
• docker openEuler moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated CVE-2023-28842 Fix available 6.8 MediumApril 4, 2023
• docker openEuler Moby vulnerability relating to supplementary group permissions CVE-2022-36109 Fix available 5.3 MediumSeptember 9, 2022
• docker openEuler Default inheritable capabilities for linux container should be empty CVE-2022-24769 Fix available 5.9 MediumMarch 24, 2022
• docker openEuler Insufficiently restricted permissions on data directory in Docker Engine CVE-2021-41091 Public exploitFix available 6.3 MediumOctober 4, 2021
• docker openEuler Docker CLI leaks private registry credentials to registry-1.docker.io CVE-2021-41092 Fix available 5.4 MediumOctober 4, 2021
• docker openEuler `docker cp` allows unexpected chmod of host files CVE-2021-41089 Fix available 2.8 LowOctober 4, 2021
• docker openEuler privilege escalation in Moby CVE-2021-21284 Fix available 6.8 MediumFebruary 2, 2021
• docker openEuler Docker daemon crash during image pull of malicious image CVE-2021-21285 Fix available 6.5 MediumFebruary 2, 2021