TI-2023-13346 CVE-2023-28840 · GHSA-232p-vwff-86mp
moby/moby's dockerd daemon encrypted overlay network may be unauthenticated
Priority MEDIUM 42
Moby is an open source container framework developed by Docker Inc.
Mobyproject
Records38All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9
Exploited now
Mobyproject records in CISA KEVNo Mobyproject vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
21 records in Moby · all components
TI-2024-24355 CVE-2024-36623 · GHSA-gh5c-3h97-2f3q
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package…
Priority LOW 36
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
TI-2024-19200 CVE-2024-29018 · GHSA-mq39-4gv4-mvpx
External DNS requests from 'internal' networks could lead to data exfiltration
Priority LOW 36
Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes.
TI-2018-09052 CVE-2018-12608 · GHSA-qrqr-3x5j-2xw9
An issue was discovered in Docker Moby before 17.06.0.
Priority LOW 35
An issue was discovered in Docker Moby before 17.06.0.
TI-2024-16178 CVE-2024-24557 · GHSA-xw73-rw38-6vjc
Moby classic builder cache poisoning
Priority LOW 34
Moby is an open-source project created by Docker to enable software containerization.
TI-2023-13348 CVE-2023-28842 · GHSA-6wrf-mxfj-pf5p
moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated
Priority LOW 33
Moby) is an open source container framework developed by Docker Inc.
TI-2021-17933 CVE-2021-41091 · GHSA-3fwx-pjgw-3558
Insufficiently restricted permissions on data directory in Docker Engine
Priority LOW 33
Moby is an open-source project created by Docker to enable software containerization.
TI-2023-13347 CVE-2023-28841 · GHSA-33pg-m6jh-5237
moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted
Priority LOW 31
Moby is an open source container framework developed by Docker Inc.
TI-2026-30614 CVE-2026-42306 · GHSA-rg2x-37c3-w2rh
Moby: Race condition in docker cp allows bind mount redirection to host path
Priority LOW 30
Moby is an open source container framework.
TI-2024-24353 CVE-2024-36621 · GHSA-2mj3-vfvx-fc43
moby v25.0.5 is affected by a Race Condition in…
Priority LOW 30
moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go.
TI-2024-24352 CVE-2024-36620 · GHSA-q59j-vv4j-v33c
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
Priority LOW 30
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
TI-2022-16532 CVE-2022-36109 · GHSA-rc4r-wh2q-q6c4
Moby vulnerability relating to supplementary group permissions
Priority LOW 30
Moby is an open-source project created by Docker to enable software containerization.
TI-2017-12151 CVE-2017-16539 · GHSA-vfjc-2qcw-j95j
The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does…
Priority LOW 30
The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain older Linux kernels are used) by leveragin…
TI-2025-34196 CVE-2025-54388 · GHSA-x4rx-4gw3-53p4
Moby's Firewalld reload makes published container ports accessible from remote hosts
Priority LOW 29
Moby is an open source container framework developed by Docker Inc.
TI-2024-21367 CVE-2024-32473 · GHSA-x84c-p2g9-rqv9
Moby IPv6 enabled on IPv4-only network interfaces
Priority LOW 29
Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes.
TI-2021-17931 CVE-2021-41089 · GHSA-v994-f8vw-g7j4
`docker cp` allows unexpected chmod of host files
Priority LOW 28
Moby is an open-source project created by Docker to enable software containerization.
TI-2022-08583 CVE-2022-24769 · GHSA-2mm7-x5h6-5pvq
Default inheritable capabilities for linux container should be empty
Priority LOW 27
Moby is an open-source project created by Docker to enable and accelerate software containerization.
TI-2026-30123 CVE-2026-41568 · GHSA-vp62-88p7-qqf5
Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
Priority LOW 26
Moby is an open source container framework.
TI-2018-07705 CVE-2018-10892 · GHSA-hg92-xfw5-qgvm
The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current…
Priority LOW 26
The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames.
TI-2022-10633 CVE-2022-27652 · GHSA-4hj2-r2pm-3hc6
Incorrect default permissions in cri-o
Priority LOW 24
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions.
TI-2025-34216 CVE-2025-54410 · GHSA-4vq8-7jfc-9cvp
Moby's Firewalld reload removes bridge network isolation
Priority LOW 23
Moby is an open source container framework developed by Docker Inc.