Lucene search

K
cbl_marinerCBL MarinerCBLMARINER:34275
HistoryApr 30, 2024 - 1:31 a.m.

CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3

2024-04-3001:31:53
CBL Mariner
63
cve
2024
24557
package
moby-engine
versions
20.10.27-3
patched
available
unix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

21.5%

CVE-2024-24557 affecting package moby-engine for versions less than 20.10.27-3. An upgraded version of the package is available that resolves this issue.

OSVersionArchitecturePackageVersionFilename
CBL-Mariner2.0allmoby-engine< 20.10.27-3UNKNOWN

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

21.5%