Skip to content
OpenAdvisories

Package · Go

github.com/docker/docker

36 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-41110 Public exploit EPSS 16%

    Moby authz zero length regression

    Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances…

    moby moby docker.io docker.io Debian Ubuntu Alpine Go
  • Critical 9.8
    CVE-2019-14271 Public exploit EPSS 19%

    Moby Docker cp broken with debian containers

    In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

    docker.io docker github.com/docker/docker github.com/moby/moby Debian Alpine Go
  • Critical 9.8
    CVE-2014-9357

    Arbitrary Code Execution

    Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

    docker.io github.com/docker/docker Debian Go