Description
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6Attack Vector: Network
Complexity: Low
Privileges: Low
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High
Affected Packages2 packages
🔴Vulnerability Details
4OSVNULL Pointer Dereference on moby image history in github.com/moby/moby↗2024-12-09 OSVNULL Pointer Dereference on moby image history↗2024-11-29 CVEListCVE-2024-36620: moby v25↗2024-11-29 GHSANULL Pointer Dereference on moby image history↗2024-11-29 📋Vendor Advisories
3Red Hatgithub.com/moby/moby: NULL Pointer Dereference in Moby↗2024-11-29 Microsoftmoby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.↗2024-11-12 DebianCVE-2024-36620: docker.io - moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/imag...↗2024