Vulnerability Report: GO-2024-2512

Affected Packages

• Path
  Go Versions
  Symbols
• github.com/docker/docker/builder/dockerfile
  before v24.0.9+incompatible, from v25.0.0+incompatible before v25.0.2+incompatible
  all symbols
• github.com/docker/docker/daemon/containerd
  before v24.0.9+incompatible, from v25.0.0+incompatible before v25.0.2+incompatible
  3 unexported affected symbols

  • imageCache.GetCache
  • isMatch
  • localCache.GetCache
• github.com/docker/docker/daemon/images
  before v24.0.9+incompatible, from v25.0.0+incompatible before v25.0.2+incompatible
  • ImageService.CommitImage
  • ImageService.CreateImage
• github.com/docker/docker/image
  before v24.0.9+incompatible, from v25.0.0+incompatible before v25.0.2+incompatible
  2 unexported affected symbols

  • store.IsBuiltLocally
  • store.SetBuiltLocally
• github.com/docker/docker/image/cache
  before v24.0.9+incompatible, from v25.0.0+incompatible before v25.0.2+incompatible
  • ImageCache.GetCache
  • LocalImageCache.GetCache
• github.com/moby/moby/builder/dockerfile
  before v24.0.9+incompatible, from v25.0.0+incompatible before v25.0.2+incompatible
  all symbols
• github.com/moby/moby/daemon/containerd
  before v24.0.9+incompatible, from v25.0.0+incompatible before v25.0.2+incompatible
  3 unexported affected symbols

  • imageCache.GetCache
  • isMatch
  • localCache.GetCache
• github.com/moby/moby/daemon/images
  before v24.0.9+incompatible, from v25.0.0+incompatible before v25.0.2+incompatible
  • ImageService.CommitImage
  • ImageService.CreateImage
• github.com/moby/moby/image
  before v24.0.9+incompatible, from v25.0.0+incompatible before v25.0.2+incompatible
  2 unexported affected symbols

  • store.IsBuiltLocally
  • store.SetBuiltLocally
• github.com/moby/moby/image/cache
  before v24.0.9+incompatible, from v25.0.0+incompatible before v25.0.2+incompatible
  • ImageCache.GetCache
  • LocalImageCache.GetCache

Aliases

• CVE-2024-24557
• GHSA-xw73-rw38-6vjc

References

• https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc
• https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae
• https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd
• https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff
• https://vuln.go.dev/ID/GO-2024-2512.json

Feedback