usn-7161-1
Vulnerability from osv_ubuntu
Published
2024-12-16 13:56
Modified
2026-04-27 14:11
Summary
Docker vulnerabilities
Details

Yair Zak discovered that Docker could unexpectedly forward DNS requests from internal networks in an unexpected manner. An attacker could possibly use this issue to exfiltrate data by encoding information in DNS queries to controlled nameservers. This issue was only addressed for the source package docker.io-app in Ubuntu 24.04 LTS. (CVE-2024-29018)

Cory Snider discovered that Docker did not properly handle authorization plugin request processing. An attacker could possibly use this issue to bypass authorization controls by forwarding API requests without their full body, leading to unauthorized actions. This issue was only addressed for the source package docker.io-app in Ubuntu 24.10 and Ubuntu 24.04 LTS, and the source package docker.io in Ubuntu 18.04 LTS. (CVE-2024-41110)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2024-41110",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "docker.io",
            "binary_version": "20.10.21-0ubuntu1~18.04.3+esm1"
          },
          {
            "binary_name": "golang-docker-dev",
            "binary_version": "20.10.21-0ubuntu1~18.04.3+esm1"
          },
          {
            "binary_name": "golang-github-docker-docker-dev",
            "binary_version": "20.10.21-0ubuntu1~18.04.3+esm1"
          },
          {
            "binary_name": "vim-syntax-docker",
            "binary_version": "20.10.21-0ubuntu1~18.04.3+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "docker.io",
        "purl": "pkg:deb/ubuntu/docker.io@20.10.21-0ubuntu1~18.04.3+esm1?arch=source\u0026distro=esm-apps/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "20.10.21-0ubuntu1~18.04.3+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.13.1-0ubuntu6",
        "17.03.2-0ubuntu1",
        "17.03.2-0ubuntu3",
        "17.03.2-0ubuntu5",
        "17.12.1-0ubuntu1",
        "18.06.1-0ubuntu1~18.04.1",
        "18.06.1-0ubuntu1.2~18.04.1",
        "18.09.2-0ubuntu1~18.04.1",
        "18.09.5-0ubuntu1~18.04.2",
        "18.09.7-0ubuntu1~18.04.1",
        "18.09.7-0ubuntu1~18.04.3",
        "18.09.7-0ubuntu1~18.04.4",
        "19.03.6-0ubuntu1~18.04.1",
        "19.03.6-0ubuntu1~18.04.2",
        "19.03.6-0ubuntu1~18.04.3",
        "20.10.2-0ubuntu1~18.04.2",
        "20.10.2-0ubuntu1~18.04.3",
        "20.10.7-0ubuntu1~18.04.1",
        "20.10.7-0ubuntu1~18.04.2",
        "20.10.7-0ubuntu5~18.04.2",
        "20.10.7-0ubuntu5~18.04.3",
        "20.10.12-0ubuntu2~18.04.1",
        "20.10.21-0ubuntu1~18.04.2",
        "20.10.21-0ubuntu1~18.04.3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2024-29018",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-41110",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:24.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "docker.io",
            "binary_version": "26.1.3-0ubuntu1~24.04.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:24.04:LTS",
        "name": "docker.io-app",
        "purl": "pkg:deb/ubuntu/docker.io-app@26.1.3-0ubuntu1~24.04.1+esm1?arch=source\u0026distro=esm-apps/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "26.1.3-0ubuntu1~24.04.1+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "24.0.5-0ubuntu1",
        "24.0.7-0ubuntu1",
        "24.0.7-0ubuntu2",
        "24.0.7-0ubuntu3",
        "24.0.7-0ubuntu4",
        "24.0.7-0ubuntu4.1",
        "26.1.3-0ubuntu1~24.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Yair Zak discovered that Docker could unexpectedly forward DNS requests\nfrom internal networks in an unexpected manner. An attacker could possibly\nuse this issue to exfiltrate data by encoding information in DNS queries \nto controlled nameservers. This issue was only addressed for the source package\ndocker.io-app in Ubuntu 24.04 LTS. (CVE-2024-29018)\n\nCory Snider discovered that Docker did not properly handle authorization \nplugin request processing. An attacker could possibly use this issue to \nbypass authorization controls by forwarding API requests without their \nfull body, leading to unauthorized actions. This issue was only addressed for \nthe source package docker.io-app in Ubuntu 24.10 and Ubuntu 24.04 LTS, \nand the source package docker.io in Ubuntu 18.04 LTS. (CVE-2024-41110)\n",
  "id": "USN-7161-1",
  "modified": "2026-04-27T14:11:38Z",
  "published": "2024-12-16T13:56:40Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7161-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-29018"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-41110"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "Docker vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2024-29018",
    "UBUNTU-CVE-2024-41110"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.