CVE-2024-36620

Name of the Vulnerable Software and Affected Versions moby versions 25.0.0 through 26.0.2

Description The issue is related to a NULL Pointer Dereference in the daemon/images/image history.go file. This could potentially allow a remote attacker to cause a denial of service.

Recommendations For moby versions 25.0.0 through 26.0.2, consider disabling the functionality related to daemon/images/image history.go until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.