docker-stable vulnerabilities (openSUSE)
67 vulnerabilities.
-
docker-stableopenSUSE Docker: `PUT /containers/{id}/archive` executes container binary on the host 7.2 High -
docker-stableopenSUSE Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
docker-stableopenSUSE Moby: AuthZ plugin bypass with oversized request body 8.8 High -
docker-stableopenSUSE Moby: Off-by-one error in plugin privilege validation 6.8 Medium -
docker-stableopenSUSE BuildKit Git URL subdir component can cause access to restricted files 8.2 High -
docker-stableopenSUSE BuildKit vulnerable to malicious frontend causing file escape outside of storage root 8.4 High -
docker-stableopenSUSE gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
docker-stableopenSUSE Security update for docker-stable No score -
docker-stableopenSUSE Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
docker-stableopenSUSE Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 6.5 Medium -
docker-stableopenSUSE jwt-go allows excessive memory allocation during header parsing 7.5 High -
docker-stableopenSUSE Secrets leakage to telemetry endpoint via cache backend configuration via buildx 4.1 Medium -
docker-stableopenSUSE Potential denial of service in golang.org/x/crypto 7.5 High -
docker-stableopenSUSE Unexpected memory consumption during token parsing in golang.org/x/oauth2 7.5 High -
docker-stableopenSUSE Moby authz zero length regression 10.0 Critical -
docker-stableopenSUSE External DNS requests from 'internal' networks could lead to data exfiltration 5.9 Medium -
docker-stableopenSUSE Musicshelf SHA-1 PinningTrustManager.java weak password hash 1.6 Low -
docker-stableopenSUSE BuildKit interactive containers API does not validate entitlements check 9.8 Critical -
docker-stableopenSUSE BuildKit possible host system access from mount stub cleaner 10.0 Critical -
docker-stableopenSUSE BuildKit possible race condition with accessing subpaths from cache mounts 8.7 High -
docker-stableopenSUSE BuildKit possible panic when incorrect parameters sent from frontend 5.3 Medium -
docker-stableopenSUSE moby/moby's dockerd daemon encrypted overlay network may be unauthenticated 7.5 High -
docker-stableopenSUSE moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted 6.8 Medium -
docker-stableopenSUSE moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated 6.8 Medium -
docker-stableopenSUSE Moby vulnerability relating to supplementary group permissions 5.3 Medium -
docker-stableopenSUSE Default inheritable capabilities for linux container should be empty 5.9 Medium -
docker-stableopenSUSE golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
docker-stableopenSUSE x/crypto/ssh vulnerable to panic via malformed packets 7.5 High -
docker-stableopenSUSE Clarify Content-Type handling in OCI spec 3.0 Low -
docker-stableopenSUSE Insufficiently restricted permissions on data directory in Docker Engine 6.3 Medium -
docker-stableopenSUSE Docker CLI leaks private registry credentials to registry-1.docker.io 5.4 Medium -
docker-stableopenSUSE Insufficiently restricted permissions on plugin directories 5.9 Medium -
docker-stableopenSUSE `docker cp` allows unexpected chmod of host files 2.8 Low -
docker-stableopenSUSE privilege escalation in Moby 6.8 Medium -
docker-stableopenSUSE Docker daemon crash during image pull of malicious image 6.5 Medium -
docker-stableopenSUSE containerd-shim API Exposed to Host Network Containers 5.2 Medium -
docker-stableopenSUSE A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to... 5.5 Medium -
docker-stableopenSUSE Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged... 5.5 Medium -
docker-stableopenSUSE Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an... 5.5 Medium -
docker-stableopenSUSE Improper Input Validation in Docker Engine 6.0 Medium -
docker-stableopenSUSE Path Traversal in Docker 8.6 High -
docker-stableopenSUSE Moby Docker cp broken with debian containers 9.8 Critical -
docker-stableopenSUSE Secret insertion into debug log in Docker 7.5 High -
docker-stableopenSUSE In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable... 7.5 High -
docker-stableopenSUSE Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory... 4.9 Medium -
docker-stableopenSUSE The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of... 5.9 Medium -
docker-stableopenSUSE In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory... 6.8 Medium -
docker-stableopenSUSE In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code... 7.5 High -
docker-stableopenSUSE The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does... 6.3 Medium -
docker-stableopenSUSE Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP) 5.9 Medium - Show olderLoading…