|
Identifier
|
Related Record |
Severity
|
Date Published
|
Description | Versions Affected |
|---|---|---|---|---|---|
| CVE-2024-36621 | BDSA-2024-9275 | Medium | Nov 29, 2024 | moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent more... |
v25.0.14, v25.0.13, v25.0.12, v25.0.11, v23.0.18, v23.0.17, v25.0.10, v25.0.9, v25.0.8, v23.0.16
|
| CVE-2024-36620 | BDSA-2024-9278 | Medium | Nov 29, 2024 | moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. |
v25.0.14, v25.0.13, v25.0.12, v25.0.11, v25.0.10, v25.0.9, v25.0.8, v25.0.7, v25.0.6, v26.0.2
|
| BDSA-2019-2240 | Medium | Jul 22, 2019 | Docker engine writes the secrets in log files in debug mode. This allows an attacker, with log files access, to steal credentials and use them to acces more... |