Skip to content
OpenAdvisories
Medium WID-SEC-2023-1183 7 CVEs

docker: Mehrere Schwachstellen

Published May 9, 2023 · Updated Nov 27, 2025 · Revision 22 · de-DE

Vendor: amazon Vendor: gentoo Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openshift Product: openSUSE Product: Rocky Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in docker ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.

Product

Docker ist eine Open-Source-Software, die dazu verwendet werden kann, Anwendungen mithilfe von Betriebssystemvirtualisierung in Containern zu isolieren.

Vulnerabilities 7

  • High 7.5
    CVE-2023-28840

    moby/moby's dockerd daemon encrypted overlay network may be unauthenticated

    Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby, is commonly …

    moby moby helm-3 ko Debian Ubuntu Alpine Wolfi Go
  • High 7.0
    CVE-2023-27561

    Opencontainers runc Incorrect Authorization vulnerability

    runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom …

    ctop podman podman-doc github.com/opencontainers/runc Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 6.8
    CVE-2023-28841

    moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted

    Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly r…

    moby moby helm-3 ko Debian Ubuntu Alpine Wolfi Go
  • Medium 6.8
    CVE-2023-28842

    moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated

    Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly …

    moby moby helm-3 ko Debian Ubuntu Alpine Wolfi Go
  • Medium 6.1
    CVE-2023-28642

    AppArmor bypass with symlinked /proc in runc

    runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version…

    opencontainers runc ctop podman Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 5.0
    CVE-2023-25809

    rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc

    runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes `/sys/fs/cgroup` writable in following conditons: 1. when runc is executed inside the user namespace, and the…

    opencontainers runc ctop podman Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Unscored —
    CVE-2023-24532

    Incorrect calculation on P256 curves in crypto/internal/nistec

    The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

    Go standard library crypto/internal/nistec katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Revision history

  1. #22

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  2. #21

    Neue Updates von SUSE aufgenommen

  3. #20

    Neue Updates von openSUSE aufgenommen

  4. #19

    Neue Updates von Ubuntu aufgenommen

  5. #18

    Neue Updates von Gentoo aufgenommen

  6. #17

    Neue Updates von Gentoo aufgenommen

  7. #16

    Neue Updates von Red Hat aufgenommen

  8. #15

    Neue Updates von Oracle Linux aufgenommen

  9. #14

    Neue Updates von Red Hat aufgenommen

  10. #13

    Neue Updates von Red Hat aufgenommen

  11. #12

    Neue Updates von Oracle Linux aufgenommen

  12. #11

    Neue Updates von SUSE aufgenommen

  13. #10

    Neue Updates von SUSE aufgenommen

  14. #9

    Neue Updates von Oracle Linux aufgenommen

  15. #8

    Neue Updates von Amazon aufgenommen

  16. #7

    Neue Updates von Red Hat aufgenommen

  17. #6

    Neue Updates von Amazon aufgenommen

  18. #5

    Neue Updates von Red Hat aufgenommen

  19. #4

    Neue Updates von Amazon aufgenommen

  20. #3

    Neue Updates von Ubuntu aufgenommen

  21. #2

    Neue Updates von Ubuntu aufgenommen

  22. #1

    Initiale Fassung

References