tocsin

CVE-2024-41110

3 advisories.

Go/github.com/docker/docker CVE-2024-41110: critical 9.9, EPSS 16.50%

Authz zero length regression

Action: Upgrade github.com/docker/docker to 23.0.15 or later.

go get github.com/docker/docker@v23.0.15
go get github.com/docker/docker@v26.1.5
go get github.com/docker/docker@v27.1.1
go get github.com/docker/docker@v25.0.6

Affected

introducedfixedlast affected
19.03.023.0.15-
26.0.026.1.5-
27.0.027.1.1-
24.0.025.0.6-

Fixed versions

23.0.1526.1.527.1.125.0.6

Sources

CVE-2024-41110 · published · modified · JSON

Go/github.com/moby/moby CVE-2024-41110: unknown, EPSS 16.50%

Moby authz zero length regression in github.com/moby/moby

Action: Upgrade github.com/moby/moby to 25.0.6+incompatible or later.

go get github.com/moby/moby@v25.0.6+incompatible
go get github.com/moby/moby@v26.1.5+incompatible
go get github.com/moby/moby@v27.1.1+incompatible

Affected

introducedfixedlast affected
20.10.0+incompatible25.0.6+incompatible-
26.0.0+incompatible26.1.5+incompatible-
27.0.0+incompatible27.1.1+incompatible-

Fixed versions

25.0.6+incompatible26.1.5+incompatible27.1.1+incompatible

Sources

CVE-2024-41110 · published · modified · JSON

Go/github.com/docker/docker CVE-2024-41110: unknown, EPSS 16.50%

Moby authz zero length regression in github.com/moby/moby

Action: Upgrade github.com/docker/docker to 25.0.6+incompatible or later.

go get github.com/docker/docker@v25.0.6+incompatible
go get github.com/docker/docker@v26.1.5+incompatible
go get github.com/docker/docker@v27.1.1+incompatible

Affected

introducedfixedlast affected
20.10.0+incompatible25.0.6+incompatible-
26.0.0+incompatible26.1.5+incompatible-
27.0.0+incompatible27.1.1+incompatible-

Fixed versions

25.0.6+incompatible26.1.5+incompatible27.1.1+incompatible

Sources

CVE-2024-41110 · published · modified · JSON