kritisch

CVE-2024-41110

moby: Authz zero length regression

Veröffentlicht 24. Juli 2024Geändert 17. Juni 2026CWE 187, 444, 863

In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.

Einstufung nach Quelle

GHSA9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Red Hat9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Trivys eigenes Label ist CRITICAL. Kritisch laut GHSA, Red Hat, Azure Linux, CBL-Mariner, Photon OS. Niedriger laut Amazon (hoch), Bottlerocket (hoch), Ubuntu (hoch).

Beschreibung

Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low. Using a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it. A security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted. Docker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable. docker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.

Betroffene Pakete und behobene Versionen

Quelle	Paket	Behoben in
Azure Linux 3.0	moby-engine	0:25.0.3-5.azl3
CBL-Mariner 2.0	moby-engine	0:24.0.9-7.cm2
go::GitHub Security Advisory Go	github.com/docker/docker	23.0.15, 26.1.5, 27.1.1, 25.0.6
Photon OS 4.0	docker, docker-cli, docker-doc und 2 weitere	24.0.9-3.ph4
Red Hat	atomic, container-selinux, docker und 11 weitere	kein Fix angegeben
alpine 3.20	docker	26.1.5-r0
alpine 3.21	docker	27.1.1-r0
alpine 3.22	docker	27.1.1-r0
alpine 3.23	docker	27.1.1-r0
alpine 3.24	docker	27.1.1-r0
alpine edge	docker	27.1.1-r0
amazon linux 2	amazon-cloudwatch-agent	1.300044.0-1.amzn2

Alle 274 Einträge aus 40 Quellen zeigen

Quelle	Paket	Behoben in
Azure Linux 3.0	moby-engine	0:25.0.3-5.azl3
CBL-Mariner 2.0	moby-engine	0:24.0.9-7.cm2
go::GitHub Security Advisory Go	github.com/docker/docker	23.0.15, 26.1.5, 27.1.1, 25.0.6
Photon OS 4.0	docker	24.0.9-3.ph4
Photon OS 4.0	docker-cli	24.0.9-3.ph4
Photon OS 4.0	docker-doc	24.0.9-3.ph4
Photon OS 4.0	docker-engine	24.0.9-3.ph4
Photon OS 4.0	docker-rootless	24.0.9-3.ph4
Red Hat	atomic	kein Fix angegeben
Red Hat	container-selinux	kein Fix angegeben
Red Hat	docker	kein Fix angegeben
Red Hat	docker-client	kein Fix angegeben
Red Hat	docker-common	kein Fix angegeben
Red Hat	docker-forward-journald	kein Fix angegeben
Red Hat	docker-logrotate	kein Fix angegeben
Red Hat	docker-lvm-plugin	kein Fix angegeben
Red Hat	docker-novolume-plugin	kein Fix angegeben
Red Hat	docker-python	kein Fix angegeben
Red Hat	docker-rhel-push-plugin	kein Fix angegeben
Red Hat	docker-selinux	kein Fix angegeben
Red Hat	docker-v1.10-migrator	kein Fix angegeben
Red Hat	python-websocket-client	kein Fix angegeben
alpine 3.20	docker	26.1.5-r0
alpine 3.21	docker	27.1.1-r0
alpine 3.22	docker	27.1.1-r0
alpine 3.23	docker	27.1.1-r0
alpine 3.24	docker	27.1.1-r0
alpine edge	docker	27.1.1-r0
amazon linux 2	amazon-cloudwatch-agent	1.300044.0-1.amzn2
amazon linux 2023	amazon-cloudwatch-agent	1.300044.0-1.amzn2023
amazon linux 2023	docker	25.0.6-1.amzn2023.0.1
amazon linux 2023	docker-debuginfo	25.0.6-1.amzn2023.0.1
amazon linux 2023	docker-debugsource	25.0.6-1.amzn2023.0.1
bottlerocket	docker-engine	1.20.5-a3e8bda1
chainguard	aactl	0.4.12-r16
chainguard	apko	0.17.0-r1
chainguard	argo-workflows	3.6.5-r2
chainguard	argo-workflows-fips	3.6.5-r2
chainguard	bom	0.6.0-r8
chainguard	buf	1.35.1-r1
chainguard	buildah	1.37.0-r0
chainguard	buildkitd	0.20.1-r3
chainguard	cadvisor	0.50.0-r0
chainguard	cadvisor-fips	0.50.0-r0
chainguard	cert-manager-cmctl	2.1.0-r3
chainguard	cert-manager-cmctl-fips	2.1.0-r4
chainguard	chainctl	0.2.59-r0
chainguard	chartmuseum	0.16.2-r4
chainguard	chartmuseum-fips	0.16.2-r2
chainguard	cilium-cli	0.16.15-r1
chainguard	commercial-chainloop-backend	1.72.2-r3
chainguard	cosign	2.3.0-r1
chainguard	cosign-fips	2.3.0-r1
chainguard	crane	0
chainguard	cri-tools	1.30.1-r2
chainguard	crossplane	1.16.0-r3
chainguard	ctop	0.7.7-r17
chainguard	dagdotdev	0.0.4-r1
chainguard	dagger	0.12.3-r0
chainguard	dive	0.12.0-r10
chainguard	docker-compose	2.29.1-r0
chainguard	docker-credential-gcr	2.1.23-r1
chainguard	eksctl	0.188.0-r0
chainguard	falcoctl	0.8.0-r5
chainguard	falcoctl-fips	0.8.0-r5
chainguard	falcoctl-fips-0.4	0.4.0-r12
chainguard	flux	2.3.0-r5
chainguard	flux-helm-controller	1.0.1-r5
chainguard	flux-image-reflector-controller	0.32.0-r6
chainguard	flux-source-controller	1.3.0-r6
chainguard	gh	2.53.0-r1
chainguard	gitlab-rails-ce-18.1	0
chainguard	gitlab-rails-ce-fips-18.1	0
chainguard	gitsign	0.10.2-r5
chainguard	goreleaser	2.1.0-r1
chainguard	grafana-alloy	1.3.0-r0
chainguard	grafana-alloy-fips	1.3.0-r0
chainguard	grype	0.79.3-r1
chainguard	guac	0.8.0-r1
chainguard	harbor-2.11	2.11.0-r2
chainguard	harbor-fips-2.11	2.11.0-r2
chainguard	harbor-scanner-trivy	0.31.3-r3
chainguard	harbor-scanner-trivy-fips	0.31.3-r3
chainguard	helm	3.15.3-r1
chainguard	helm-3	3.19.2-r1
chainguard	helm-4	4.0.1-r1
chainguard	helm-fips	3.15.3-r1
chainguard	helm-fips-3	3.19.2-r0
chainguard	helm-fips-4	4.0.1-r1
chainguard	helm-operator	1.36.0-r1
chainguard	helm-operator-fips	1.35.0-r2
chainguard	helm-push	0.10.4-r13
chainguard	istio-pilot-agent-1.22	1.22.3-r1
chainguard	istio-pilot-discovery-1.22	1.22.3-r1
chainguard	k3d	5.7.2-r1
chainguard	k3s	1.30.3.1-r0
chainguard	k8sgpt	0.3.39-r1
chainguard	k9s	0.32.5-r3
chainguard	kaniko	1.25.3-r2
chainguard	kaniko-fips	1.24.0-r8
chainguard	kargo	0.8.1-r1
chainguard	ko	0.15.4-r5
chainguard	ko-fips	0.15.4-r3
chainguard	kots	1.112.2-r1
chainguard	kpt	1.0.0_beta49-r9
chainguard	kubeflow-katib	0.17.0-r13
chainguard	kubescape	3.0.15-r1
chainguard	kubevela	0
chainguard	kubevela-fips	0
chainguard	loki-2.9	2.9.17-r0
chainguard	loki-fips-2.9	2.9.15-r2
chainguard	longhorn-engine-1.10	0
chainguard	longhorn-engine-1.8	0
chainguard	longhorn-engine-1.9	0
chainguard	melange	0.11.2-r2
chainguard	nerdctl	1.7.6-r7
chainguard	neuvector	5.3.4-r1
chainguard	neuvector-fips	5.4.3-r0
chainguard	neuvector-scanner	0_git20240528-r6
chainguard	neuvector-scanner-fips	0_git20240528-r3
chainguard	neuvector-sigstore-interface	0_git20240801-r0
chainguard	neuvector-sigstore-interface-fips	0_git20240801-r0
chainguard	newrelic-infrastructure-agent	1.55.2-r0
chainguard	opentelemetry-collector	0.139.0-r0
chainguard	opentelemetry-collector-contrib	0.105.0-r0
chainguard	opentelemetry-collector-contrib-fips	0.105.0-r0
chainguard	opentelemetry-collector-fips	0.107.0-r0
chainguard	paranoia	0.2.1-r17
chainguard	policy-controller	0.9.0-r7
chainguard	policy-controller-fips	0.9.0-r9
chainguard	prometheus-2.51	2.51.2-r48
chainguard	prometheus-2.53	2.53.1-r1
chainguard	rancher-2.10	2.10.11-r5
chainguard	rancher-agent-2.10	0
chainguard	rancher-agent-2.11	0
chainguard	rancher-agent-2.9	0
chainguard	rancher-fleet	0.10.0-r2
chainguard	rke2-runtime-1.33	0
chainguard	rke2-runtime-1.36	0
chainguard	scorecard	5.0.0-r0
chainguard	skaffold	2.14.0-r0
chainguard	skopeo	1.16.0-r0
chainguard	slsa-verifier	2.6.0-r1
chainguard	syft	1.10.0-r0
chainguard	tekton-chains	0.21.1-r4
chainguard	tekton-chains-fips	0.21.1-r4
chainguard	timoni	0.22.0-r2
chainguard	tkn	0.37.0-r5
chainguard	tkn-fips	0.37.0-r5
chainguard	traefik-fips-2.11	2.11.8-r0
chainguard	trivy	0.54.0-r0
chainguard	trivy-fips	0.54.0-r0
chainguard	up	0.31.0-r3
chainguard	vault-1.16	1.16.3-r44
chainguard	vault-1.17	1.17.6-r18
chainguard	vcluster	0.19.7-r1
chainguard	vexctl	0.2.6-r11
chainguard	wolfictl	0.21.0-r1
chainguard	zarf	0.38.0-r0
chainguard	zot	2.1.0-r2
debian 11	docker.io	20.10.5+dfsg1-1+deb11u3
debian 12	docker.io	20.10.24+dfsg1-1+deb12u1
debian 13	docker.io	26.1.5+dfsg1-2
debian 14	docker.io	26.1.5+dfsg1-2
echo	docker.io	20.10.24+dfsg1-1+deb12u1
minimos	cadvisor	0.49.1-r2
minimos	docker-25	25.0.13-r0
minimos	docker-fips-25	25.0.13-r0
minimos	k3d	5.9.0-r0
minimos	kyverno-notation-aws	1.1-r1
minimos	kyverno-notation-aws-fips	1.1-r1
minimos	paketo-buildpacks-bundle-install	0.9.10-r0
minimos	paketo-buildpacks-bundler	0.9.11-r0
minimos	paketo-buildpacks-passenger	0.14.23-r0
minimos	prometheus-2.53	2.53.3-r2
rapidfort alpine 3.21	docker	27.1.1-r0
rapidfort alpine 3.22	docker	27.1.1-r0
rapidfort alpine 3.23	docker	27.1.1-r0
rapidfort alpine 3.24	docker	27.1.1-r0
rapidfort amazon linux 2023	amazon-cloudwatch-agent	1.300044.0-1.amzn2023
rapidfort amazon linux 2023	docker	25.0.6-1.amzn2023.0.1
rapidfort ubuntu 20.04	docker.io	0:26.1.4+dfsg2-1ubuntu1.1
rapidfort ubuntu 22.04	docker.io	0:26.1.4+dfsg2-1ubuntu1.1
rapidfort ubuntu 24.04	docker.io	0:26.1.4+dfsg2-1ubuntu1.1
root.io debian 12	rootio-docker.io	20.10.24+dfsg1-1+deb12u1
ubuntu 18.04-ESM	docker.io	20.10.21-0ubuntu1~18.04.3+esm1
ubuntu 20.04-ESM	docker.io	20.10.21-0ubuntu1~20.04.6+esm1
ubuntu 20.04-ESM	docker.io-app	26.1.3-0ubuntu1~20.04.1+esm1
ubuntu 22.04	docker.io	kein Fix angegeben
ubuntu 22.04	docker.io-app	27.5.1-0ubuntu3~22.04.2
ubuntu 24.04	docker.io	kein Fix angegeben
ubuntu 24.04	docker.io-app	27.5.1-0ubuntu3~24.04.2
ubuntu 24.10	docker.io	26.1.4+dfsg2-1ubuntu1.1
ubuntu 24.10	docker.io-app	26.1.3-0ubuntu1.1
ubuntu 25.04	docker.io-app	26.1.3-0ubuntu2
ubuntu 25.10	docker.io-app	26.1.3-0ubuntu2
ubuntu 26.04	docker.io-app	26.1.3-0ubuntu2
ubuntu 26.10	docker.io-app	26.1.3-0ubuntu2
wolfi	aactl	0.4.12-r16
wolfi	apko	0.17.0-r1
wolfi	argo-workflows	3.6.5-r2
wolfi	bom	0.6.0-r8
wolfi	buf	1.35.1-r1
wolfi	buildah	1.37.0-r0
wolfi	buildkitd	0.20.1-r3
wolfi	cadvisor	0.50.0-r0
wolfi	cert-manager-cmctl	2.1.0-r3
wolfi	chartmuseum	0.16.2-r4
wolfi	cilium-cli	0.16.15-r1
wolfi	cosign	2.3.0-r1
wolfi	crane	0
wolfi	cri-tools	1.30.1-r2
wolfi	crossplane	1.16.0-r3
wolfi	ctop	0.7.7-r17
wolfi	dagdotdev	0.0.4-r1
wolfi	dagger	0.12.3-r0
wolfi	dive	0.12.0-r10
wolfi	docker-compose	2.29.1-r0
wolfi	docker-credential-gcr	2.1.23-r1
wolfi	eksctl	0.188.0-r0
wolfi	falcoctl	0.8.0-r5
wolfi	flux	2.3.0-r5
wolfi	flux-helm-controller	1.0.1-r5
wolfi	flux-image-reflector-controller	0.32.0-r6
wolfi	flux-source-controller	1.3.0-r6
wolfi	gh	2.53.0-r1
wolfi	gitsign	0.10.2-r5
wolfi	goreleaser	2.1.0-r1
wolfi	grafana-alloy	1.3.0-r0
wolfi	grype	0.79.3-r1
wolfi	guac	0.8.0-r1
wolfi	harbor-scanner-trivy	0.31.3-r3
wolfi	helm	3.15.3-r1
wolfi	helm-3	3.19.2-r1
wolfi	helm-4	4.0.1-r1
wolfi	helm-operator	1.36.0-r1
wolfi	helm-push	0.10.4-r13
wolfi	k3d	5.7.2-r1
wolfi	k3s	1.30.3.1-r0
wolfi	k8sgpt	0.3.39-r1
wolfi	k9s	0.32.5-r3
wolfi	kaniko	1.25.3-r2
wolfi	kargo	0.8.1-r1
wolfi	ko	0.15.4-r5
wolfi	kots	1.112.2-r1
wolfi	kpt	1.0.0_beta49-r9
wolfi	kubeflow-katib	0.17.0-r13
wolfi	kubescape	3.0.15-r1
wolfi	kubevela	0
wolfi	melange	0.11.2-r2
wolfi	nerdctl	1.7.6-r7
wolfi	neuvector-scanner	0_git20240528-r6
wolfi	neuvector-sigstore-interface	0_git20240801-r0
wolfi	newrelic-infrastructure-agent	1.55.2-r0
wolfi	opentelemetry-collector	0.139.0-r0
wolfi	opentelemetry-collector-contrib	0.105.0-r0
wolfi	paranoia	0.2.1-r17
wolfi	policy-controller	0.9.0-r7
wolfi	rancher-fleet	0.10.0-r2
wolfi	scorecard	5.0.0-r0
wolfi	skaffold	2.14.0-r0
wolfi	skopeo	1.16.0-r0
wolfi	slsa-verifier	2.6.0-r1
wolfi	syft	1.10.0-r0
wolfi	tekton-chains	0.21.1-r4
wolfi	timoni	0.22.0-r2
wolfi	tkn	0.37.0-r5
wolfi	trivy	0.54.0-r0
wolfi	up	0.31.0-r3
wolfi	vcluster	0.19.7-r1
wolfi	vexctl	0.2.6-r11
wolfi	wolfictl	0.21.0-r1
wolfi	zarf	0.38.0-r0
wolfi	zot	2.1.0-r2

Referenzen

Alle 24 Referenzen