Search CVE reports
1 – 10 of 84 results
Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and...
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace...
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(The Dockerfile frontend loaded the Dockerfile and .dockerignore files ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(A malicious frontend can submit an LLB definition that causes buildkit ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(BuildKit may be tricked into performing file actions with special file ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(A malicious external BuildKit frontend can send requests using the int ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(A malicious image can advertise DiffIDs from another image while conta ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(An unauthenticated attacker controlling a registry or OCI-layout blob ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(If BuildKit daemon is started with --cdi-disabled it can lead to daemo ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a...
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |