docker vulnerabilities (openSUSE)
79 vulnerabilities.
-
dockeropenSUSE Docker: `PUT /containers/{id}/archive` executes container binary on the host 7.2 High -
dockeropenSUSE Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
dockeropenSUSE crypto: algif_aead - Revert to operating out-of-place 7.8 High -
dockeropenSUSE Sigstore Timestamp Authority has Improper Certificate Validation in verifier 5.5 Medium -
dockeropenSUSE Security update for docker No score -
dockeropenSUSE CNI Plugins Portmap nftables backend intercepts non-local traffic 6.6 Medium -
dockeropenSUSE Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
dockeropenSUSE Moby's Firewalld reload makes published container ports accessible from remote hosts 5.1 Medium -
dockeropenSUSE Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 6.5 Medium -
dockeropenSUSE Secrets leakage to telemetry endpoint via cache backend configuration via buildx 4.1 Medium -
dockeropenSUSE Potential denial of service in golang.org/x/crypto 7.5 High -
dockeropenSUSE Unexpected memory consumption during token parsing in golang.org/x/oauth2 7.5 High -
dockeropenSUSE Moby authz zero length regression 10.0 Critical -
dockeropenSUSE Containers/image: digest type does not guarantee valid type 8.3 High -
dockeropenSUSE External DNS requests from 'internal' networks could lead to data exfiltration 5.9 Medium -
dockeropenSUSE Buildah: buildah: container escape via improper bind mount validation 8.6 High -
dockeropenSUSE Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) 4.3 Medium -
dockeropenSUSE Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High -
dockeropenSUSE BuildKit interactive containers API does not validate entitlements check 9.8 Critical -
dockeropenSUSE BuildKit possible host system access from mount stub cleaner 10.0 Critical -
dockeropenSUSE BuildKit possible race condition with accessing subpaths from cache mounts 8.7 High -
dockeropenSUSE BuildKit possible panic when incorrect parameters sent from frontend 5.3 Medium -
dockeropenSUSE DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics 7.5 High -
dockeropenSUSE OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics 7.5 High -
dockeropenSUSE moby/moby's dockerd daemon encrypted overlay network may be unauthenticated 7.5 High -
dockeropenSUSE moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted 6.8 Medium -
dockeropenSUSE moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated 6.8 Medium -
dockeropenSUSE Moby vulnerability relating to supplementary group permissions 5.3 Medium -
dockeropenSUSE containerd CRI plugin: Host memory exhaustion through ExecSync 5.5 Medium -
dockeropenSUSE Incorrect Default Permissions in runc 5.9 Medium -
dockeropenSUSE Default inheritable capabilities for linux container should be empty 5.9 Medium -
dockeropenSUSE golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
dockeropenSUSE Insecure handling of image volumes in containerd CRI plugin 7.5 High -
dockeropenSUSE x/crypto/ssh vulnerable to panic via malformed packets 7.5 High -
dockeropenSUSE Clarify Content-Type handling in OCI spec 3.0 Low -
dockeropenSUSE Insufficiently restricted permissions on data directory in Docker Engine 6.3 Medium -
dockeropenSUSE Docker CLI leaks private registry credentials to registry-1.docker.io 5.4 Medium -
dockeropenSUSE Insufficiently restricted permissions on plugin directories 5.9 Medium -
dockeropenSUSE `docker cp` allows unexpected chmod of host files 2.8 Low -
dockeropenSUSE Archive package allows chmod of file outside of unpack target directory 5.0 Medium -
dockeropenSUSE mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs 8.5 High -
dockeropenSUSE environment variable leak 6.3 Medium -
dockeropenSUSE privilege escalation in Moby 6.8 Medium -
dockeropenSUSE Docker daemon crash during image pull of malicious image 6.5 Medium -
dockeropenSUSE containerd-shim API Exposed to Host Network Containers 5.2 Medium -
dockeropenSUSE A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to... 5.5 Medium -
dockeropenSUSE Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged... 5.5 Medium -
dockeropenSUSE Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an... 5.5 Medium -
dockeropenSUSE Improper Input Validation in Docker Engine 6.0 Medium -
dockeropenSUSE Path Traversal in Docker 8.6 High - Show olderLoading…