Skip to content

Product

mobyproject moby vulnerabilities

21 published CVES affecting mobyproject moby, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
21
Critical
0
High
6
Medium
15
Low
0
Unscored
0
CISA KEV
0

Latest mobyproject moby CVEs

Newest publication first

  3. CVE-2025-54410 Moby's Firewalld reload removes bridge network isolation

    Published
    MediumCVSS 5.2 EPSS 0.18%

    Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fail...

  6. CVE-2024-36623 Moby Race Condition vulnerability

    Published
    HighCVSS 8.1 EPSS 0.64%

    moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.

  7. CVE-2024-36621 Moby Race Condition vulnerability

    Published
    MediumCVSS 6.5 EPSS 0.63%

    moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion.

  8. CVE-2024-32473 Moby IPv6 enabled on IPv4-only network interfaces

    Published
    MediumCVSS 6.5 EPSS 0.35%

    Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. In 26.0.0, IPv6 is not disabled on network interfaces, including those belonging to networks where --ipv6=false. An conta...

  10. CVE-2024-24557 Moby classic builder cache poisoning

    Published
    HighCVSS 7.8 EPSS 0.26%

    Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions (most important being HEALTHCHECK and ONBUILD) would not cause...

  14. CVE-2022-36109 Moby vulnerability relating to supplementary group permissions

    Published
    MediumCVSS 6.3 EPSS 1.1%

    Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access to a container and manipulates their supplementary group access, they...

  15. CVE-2022-27652 Incorrect Default Permissions in CRI-O

    Published
    MediumCVSS 5.3 EPSS 0.25%

    A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with...

  17. CVE-2021-41089 `docker cp` allows unexpected chmod of host files

    Published
    MediumCVSS 6.3 EPSS 0.29%

    Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission changes for existing files in the hos...

  19. CVE-2018-12608 Docker Authentication Bypass

    Published
    HighCVSS 7.5 EPSS 0.92%

    An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a sy...

  20. CVE-2018-10892 The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardware like enabling/disab...

    Published
    MediumCVSS 5.3 EPSS 1.1%

    The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.