Go/github.com/docker/docker CVE-2024-24557: unknown, EPSS 0.26%
Classic builder cache poisoning in github.com/docker/docker
Action: Upgrade github.com/docker/docker to 24.0.9+incompatible or later.
go get github.com/docker/docker@v24.0.9+incompatiblego get github.com/docker/docker@v25.0.2+incompatibleAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 24.0.9+incompatible | - |
| 25.0.0+incompatible | 25.0.2+incompatible | - |
Fixed versions
| 24.0.9+incompatible | 25.0.2+incompatible |
Sources
- osv: GO-2024-2512
- https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc
- https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae
- https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd
- https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff
CVE-2024-24557 · published · modified · JSON