tocsin

CVE-2024-29018

2 advisories.

Go/github.com/docker/docker CVE-2024-29018: medium 5.9, EPSS 0.75%

Moby's external DNS requests from 'internal' networks could lead to data exfiltration

Action: Upgrade github.com/docker/docker to 23.0.11 or later.

go get github.com/docker/docker@v26.0.0-rc3
go get github.com/docker/docker@v25.0.5
go get github.com/docker/docker@v23.0.11

Affected

introducedfixedlast affected
26.0.0-rc126.0.0-rc3-
25.0.025.0.5-
023.0.11-

Fixed versions

26.0.0-rc325.0.523.0.11

Sources

CVE-2024-29018 · published · modified · JSON

Go/github.com/docker/docker CVE-2024-29018: unknown, EPSS 0.75%

Data exfiltration from internal networks in github.com/docker/docker

Action: Upgrade github.com/docker/docker to 25.0.5+incompatible or later.

go get github.com/docker/docker@v25.0.5+incompatible
go get github.com/docker/docker@v26.0.0-rc3+incompatible

Affected

introducedfixedlast affected
25.0.0+incompatible25.0.5+incompatible-
26.0.0-rc1+incompatible26.0.0-rc3+incompatible-

Fixed versions

25.0.5+incompatible26.0.0-rc3+incompatible

Sources

CVE-2024-29018 · published · modified · JSON