PT-2024-9112
CVE-2024-36623
·
Published
2024-11-29
·
Updated
2026-08-25
Description by
CVSS 4.0
8.7
HighMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
moby version 25.0.3
Description:
The issue is related to a Race Condition in the streamformatter package, which can be exploited to trigger multiple concurrent write operations. This can result in data corruption or application crashes. The vulnerability can be used by a remote attacker to cause a denial of service.
Recommendations:
For moby version 25.0.3, apply the available patch immediately to resolve the issue. As a temporary workaround, consider restricting access to the streamformatter package to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾