CVE-2024-36620

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-36620

Severity

6.5

Medium

CVSS V3

Description

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.

References

https://images.chainguard.dev/security/CGA-m2x6-5mrx-5rc5
https://github.com/advisories/GHSA-q59j-vv4j-v33c
https://images.chainguard.dev/security/CGA-m2v8-cpg3-6rxj
https://images.chainguard.dev/security/CGA-rx44-hr2j-gmwx
https://images.chainguard.dev/security/CGA-pqgr-7jhr-f75c
https://images.chainguard.dev/security/CGA-h9w7-p6x9-82mp
https://images.chainguard.dev/security/CGA-4v23-5m84-rx5r
https://images.chainguard.dev/security/CGA-gcc6-4jvw-72qj
https://images.chainguard.dev/security/CGA-q2p6-54qh-h4qx
https://images.chainguard.dev/security/CGA-vvq7-gv9f-c3x4
https://images.chainguard.dev/security/CGA-vwgw-qqxf-55hh
https://images.chainguard.dev/security/CGA-p38c-x3rg-frx8
https://images.chainguard.dev/security/CGA-9px2-pvp4-p29m
https://images.chainguard.dev/security/CGA-79pf-x4mw-mqmx
https://images.chainguard.dev/security/CGA-5m4h-6wx4-8mcp
https://images.chainguard.dev/security/CGA-3vxh-gwjv-v2g3
https://images.chainguard.dev/security/CGA-prp4-fmxw-m7fw
https://images.chainguard.dev/security/CGA-4vvc-qmcw-9vw5
https://images.chainguard.dev/security/CGA-x943-4x85-gx3g
https://images.chainguard.dev/security/CGA-h49m-f5hx-q828
https://images.chainguard.dev/security/CGA-pqf6-wp36-5527
https://images.chainguard.dev/security/CGA-j9hg-7m69-7jp3
https://images.chainguard.dev/security/CGA-2548-hjp9-82mh
https://images.chainguard.dev/security/CGA-5549-fmv8-7936
https://images.chainguard.dev/security/CGA-pw6p-xrwx-mv3f
https://images.chainguard.dev/security/CGA-6644-pfwr-qfqp
https://images.chainguard.dev/security/CGA-w3fc-hqrw-v9wj
https://images.chainguard.dev/security/CGA-hccv-466x-wpw5
https://images.chainguard.dev/security/CGA-7vr4-f2rw-9f6v
https://images.chainguard.dev/security/CGA-7cjq-9m8m-8pcv
https://images.chainguard.dev/security/CGA-3vc4-9624-rfjr
https://images.chainguard.dev/security/CGA-9cmx-5ww8-84rr
https://images.chainguard.dev/security/CGA-qxc8-prhr-vh7q
https://images.chainguard.dev/security/CGA-fw5f-2wcr-6w42
https://images.chainguard.dev/security/CGA-3w2x-4f9r-86p6
https://images.chainguard.dev/security/CGA-2hg9-8h7p-4qvf
https://images.chainguard.dev/security/CGA-x6ch-3624-4pp7
https://images.chainguard.dev/security/CGA-4x78-pf4v-9wpq
https://images.chainguard.dev/security/CGA-vr27-9mrw-6g9r
https://images.chainguard.dev/security/CGA-gjcj-qxmx-h4w3
https://images.chainguard.dev/security/CGA-v8q9-95h9-ghv2
https://github.com/moby/moby/blob/v26.0.2/daemon/images/image_history.go#L48
https://gist.github.com/1047524396/f08816669701ab478a265a811d2c89b2
https://github.com/moby/moby/commit/ab570ab3d62038b3d26f96a9bb585d0b6095b9b4

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CVE-2024-36620

Severity

Description

References

Affected packages

The trusted source for open source

Product

Solutions

Customers

Resources

Company