IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.1Alta

CVE-2021-32847Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx

moby hyperkit Publicada: (hace 3 años)

Descripción

HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior, a malicious guest can trigger a vulnerability in the host by abusing the disk driver that may lead to the disclosure of the host memory into the virtualized guest. This issue is fixed in commit cf60095a4d8c3cb2e182a14415467afd356e982f.

Debilidad (CWE): CWE-125

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
moby hyperkit 0.20210107 – ≤ 0.20210107

Referencias y parches

CVE recientes del mismo producto — Docker / Moby

5.7Media
CVE-2026-123082

Docker Desktop logs can expose the Docker Hub access token

Docker Docker Desktop

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker D…

6.7Media
CVE-2026-121522

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.