Search CVE reports
1 – 10 of 82 results
(The Dockerfile frontend loaded the Dockerfile and .dockerignore files ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(A malicious frontend can submit an LLB definition that causes buildkit ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(BuildKit may be tricked into performing file actions with special file ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(A malicious external BuildKit frontend can send requests using the int ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(A malicious image can advertise DiffIDs from another image while conta ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(An unauthenticated attacker controlling a registry or OCI-layout blob ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
(If BuildKit daemon is started with --cdi-disabled it can lead to daemo ...)
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a...
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive...
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host.
2 affected packages
docker.io, docker.io-app
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| docker.io | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| docker.io-app | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |