CVE-2021-32847
Published Feb 20, 2023HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior, a malicious guest can trigger a vulnerability in the host by abusi…
Vendor archive
mobyproject CVEs
Beta · best-effort38 CVEs tagged to vendor mobyproject — 2 Critical, 11 High, 22 Medium, 3 Low, 0 Unrated.
CVE-2021-32846
Published Feb 17, 2023HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107, function `pci_vtsock_proc_tx` in `virtio-sock` can lead to to uninitialized…
CVE-2021-32845
Published Feb 17, 2023HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, the implementation of `qnotify` at `pci_vtrnd_notify`…
CVE-2021-32844
Published Feb 17, 2023HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, ` vi_pci_write` has is a call to `vc_cfgwrite` that do…
CVE-2021-32843
Published Feb 17, 2023HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, `virtio.c` has is a call to `vc_cfgread` that does not…
CVE-2022-36109
Published Sep 9, 2022Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary groups are not set up properly. I…
CVE-2022-27652
Published Apr 18, 2022A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started…
CVE-2022-24769
Published Mar 24, 2022Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version 20.10.14 where contai…
CVE-2021-41091
Published Oct 4, 2021Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`…
CVE-2021-41089
Published Oct 4, 2021Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into…
CVE-2018-12608
Published Sep 10, 2018An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roo…
CVE-2018-10892
Published Jul 6, 2018The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardwar…
CVE-2017-16539
Published Nov 4, 2017The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain o…
Showing 26-38 of 38 CVEsPage 2 of 2