Search CVE reports
11 – 20 of 59 results
CVE-2023-28842
Medium priorityMoby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is...
2 affected packages
docker.io, docker.io-app
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| docker.io | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| docker.io-app | Not affected | Vulnerable | Vulnerable | — | — |
CVE-2023-28841
Medium priorityMoby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is...
2 affected packages
docker.io, docker.io-app
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| docker.io | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| docker.io-app | Not affected | Vulnerable | Vulnerable | — | — |
CVE-2023-28840
Medium priorityMoby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is...
2 affected packages
docker.io, docker.io-app
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| docker.io | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| docker.io-app | Not affected | Vulnerable | Vulnerable | — | — |
CVE-2023-26054
Medium priorityBuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In affected versions when the user sends a build request that contains a Git URL that contains credentials and...
2 affected packages
docker.io, docker.io-app
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| docker.io | Not affected | Not affected | Not affected | Not affected | Not affected |
| docker.io-app | Not affected | Not affected | Not affected | Not in release | Not in release |
CVE-2022-36109
Medium prioritySome fixes available 3 of 5
Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access to a container and...
1 affected package
docker.io
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| docker.io | Not affected | Fixed | Fixed | Fixed | Vulnerable |
CVE-2021-41190
Low prioritySome fixes available 9 of 18
The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to...
3 affected packages
containerd, docker-registry, docker.io
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| containerd | Fixed | Fixed | Fixed | Fixed | Needs evaluation |
| docker-registry | Not affected | Not affected | Not affected | Not affected | Not affected |
| docker.io | Not affected | Not affected | Not affected | Vulnerable | Vulnerable |
CVE-2021-41092
Medium prioritySome fixes available 10 of 11
Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically...
1 affected package
docker.io
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| docker.io | Fixed | Fixed | Fixed | Fixed | Vulnerable |
CVE-2021-41091
Medium prioritySome fixes available 5 of 6
Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficiently...
1 affected package
docker.io
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| docker.io | — | Fixed | Fixed | Fixed | Not affected |
CVE-2021-41089
Medium priorityMoby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix...
1 affected package
docker.io
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| docker.io | — | Fixed | Fixed | Fixed | Fixed |
CVE-2021-21285
Medium prioritySome fixes available 3 of 5
In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the...
1 affected package
docker.io
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| docker.io | Not affected | Not affected | Fixed | Fixed | Vulnerable |