PT-2024-9112
CVE-2024-36623
·
تاريخ النشر
2024-11-29
·
تاريخ التحديث
2026-08-25
الوصف من
CVSS 4.0
8.7
عاليةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
moby version 25.0.3
Description:
The issue is related to a Race Condition in the streamformatter package, which can be exploited to trigger multiple concurrent write operations. This can result in data corruption or application crashes. The vulnerability can be used by a remote attacker to cause a denial of service.
Recommendations:
For moby version 25.0.3, apply the available patch immediately to resolve the issue. As a temporary workaround, consider restricting access to the streamformatter package to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾