Kurz gesagt
- CVE-2024-36623 ist eine Schwachstelle (HOCH (CVSS 8.1)) in github.com/moby/moby, moby (mobyproject).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.64%, höher als bei 50.8% aller Schwachstellen.
- Abhilfe: auf 25.0.4, 26.0.0+incompatible oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| github.com/moby/moby Go | < 25.0.4< 26.0.0+incompatible
| 25.0.426.0.0+incompatible
|
| moby | ≤ 25.0.3
| No fix yet |
Description
moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
NVD description
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free