CVE-2024-24557
4 advisories.
Go/github.com/docker/docker CVE-2024-24557: medium 6.9
Classic builder cache poisoning
Action: Upgrade github.com/docker/docker to 24.0.9 or later.
go get github.com/docker/docker@v24.0.9go get github.com/docker/docker@v25.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 24.0.9 | - |
| 25.0.0 | 25.0.2 | - |
Fixed versions
| 24.0.9 | 25.0.2 |
Sources
- osv: GHSA-xw73-rw38-6vjc
- https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc
- https://nvd.nist.gov/vuln/detail/CVE-2024-24557
- https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae
- https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd
- https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff
- https://github.com/moby/moby
CVE-2024-24557 · published · modified · JSON
Go/github.com/moby/moby CVE-2024-24557: medium 6.9
Classic builder cache poisoning
Action: Upgrade github.com/moby/moby to 24.0.9 or later.
go get github.com/moby/moby@v24.0.9go get github.com/moby/moby@v25.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 24.0.9 | - |
| 25.0.0 | 25.0.2 | - |
Fixed versions
| 24.0.9 | 25.0.2 |
Sources
- osv: GHSA-xw73-rw38-6vjc#Go/github.com/moby/moby
- https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc
- https://nvd.nist.gov/vuln/detail/CVE-2024-24557
- https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae
- https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd
- https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff
- https://github.com/moby/moby
CVE-2024-24557 · published · modified · JSON
Go/github.com/docker/docker CVE-2024-24557: unknown
Classic builder cache poisoning in github.com/docker/docker
Action: Upgrade github.com/docker/docker to 24.0.9+incompatible or later.
go get github.com/docker/docker@v24.0.9+incompatiblego get github.com/docker/docker@v25.0.2+incompatibleAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 24.0.9+incompatible | - |
| 25.0.0+incompatible | 25.0.2+incompatible | - |
Fixed versions
| 24.0.9+incompatible | 25.0.2+incompatible |
Sources
- osv: GO-2024-2512
- https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc
- https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae
- https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd
- https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff
CVE-2024-24557 · published · modified · JSON
Go/github.com/moby/moby CVE-2024-24557: unknown
Classic builder cache poisoning in github.com/docker/docker
Action: Upgrade github.com/moby/moby to 24.0.9+incompatible or later.
go get github.com/moby/moby@v24.0.9+incompatiblego get github.com/moby/moby@v25.0.2+incompatibleAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 24.0.9+incompatible | - |
| 25.0.0+incompatible | 25.0.2+incompatible | - |
Fixed versions
| 24.0.9+incompatible | 25.0.2+incompatible |
Sources
- osv: GO-2024-2512#Go/github.com/moby/moby
- https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc
- https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae
- https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd
- https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff
CVE-2024-24557 · published · modified · JSON