Vulnerability Report: GO-2024-3005

Affected Packages

• Path
  Go Versions
  Custom Versions^*
  Symbols
• github.com/moby/moby/pkg/authorization
  from v20.10.0+incompatible before v25.0.6+incompatible, from v26.0.0+incompatible before v26.1.5+incompatible, from v27.0.0+incompatible before v27.1.1+incompatible
  from 19.0.0 before 19.03.16, from 23.0.0 before 23.0.15, from 24.0.0 before 24.0.10, from 20.0.0 before 20.10.28, from 25.0.0 before 25.0.6, from 26.0.0 before 26.0.3, from 26.1.0 before 26.1.15, from 27.0.0 before 27.0.4, from 27.1.0 before 27.1.1
  • Ctx.AuthZRequest
  • Ctx.AuthZResponse
• github.com/docker/docker/pkg/authorization
  from v20.10.0+incompatible before v25.0.6+incompatible, from v26.0.0+incompatible before v26.1.5+incompatible, from v27.0.0+incompatible before v27.1.1+incompatible
  from 19.0.0 before 19.03.16, from 23.0.0 before 23.0.15, from 24.0.0 before 24.0.10, from 20.0.0 before 20.10.28, from 25.0.0 before 25.0.6, from 26.0.0 before 26.0.3, from 26.1.0 before 26.1.15, from 27.0.0 before 27.0.4, from 27.1.0 before 27.1.1
  • Ctx.AuthZRequest
  • Ctx.AuthZResponse

^{*Custom versions, which can't be mapped automatically to standard Go module versions, are ignored by govulncheck. (See this note on versions for more details.)}

Aliases

• CVE-2024-41110

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-41110
• https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191
• https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76
• https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b4251872919
• https://github.com/moby/moby/commit/852759a7df454cbf88db4e954c919becd48faa9b
• https://github.com/moby/moby/commit/a31260625655cff9ae226b51757915e275e304b0
• https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1
• https://github.com/moby/moby/commit/ae160b4edddb72ef4bd71f66b975a1a1cc434f00
• https://github.com/moby/moby/commit/ae2b3666c517c96cbc2adf1af5591a6b00d4ec0f
• https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801
• https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb
• https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq
• https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin
• https://vuln.go.dev/ID/GO-2024-3005.json

Feedback