blob: 223c1a332b45b4d8ca96247b3dafdf1ca2e27b1c [file] [log] [blame]
{
"schema_version": "1.3.1",
"id": "GO-2024-2500",
"modified": "0001-01-01T00:00:00Z",
"published": "0001-01-01T00:00:00Z",
"aliases": [
"CVE-2021-41091",
"GHSA-3fwx-pjgw-3558"
],
"summary": "Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker",
"details": "Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker",
"affected": [
{
"package": {
"name": "github.com/docker/docker",
"ecosystem": "Go"
},
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "0"
},
{
"fixed": "20.10.9+incompatible"
}
]
}
],
"ecosystem_specific": {
"imports": [
{
"path": "github.com/docker/docker/daemon",
"symbols": [
"Daemon.create",
"Daemon.setupContainerMountsRoot",
"NewDaemon",
"setupDaemonRoot"
]
},
{
"path": "github.com/docker/docker/daemon/graphdriver/aufs",
"symbols": [
"Init"
]
},
{
"path": "github.com/docker/docker/daemon/graphdriver/btrfs",
"symbols": [
"Driver.Create",
"Init"
]
},
{
"path": "github.com/docker/docker/daemon/graphdriver/fuse-overlayfs",
"symbols": [
"Driver.create",
"Init"
]
},
{
"path": "github.com/docker/docker/daemon/graphdriver/overlay",
"symbols": [
"Driver.Create",
"Init"
]
},
{
"path": "github.com/docker/docker/daemon/graphdriver/overlay2",
"symbols": [
"Driver.create",
"Init"
]
},
{
"path": "github.com/docker/docker/daemon/graphdriver/vfs",
"symbols": [
"Driver.Create",
"Init"
]
},
{
"path": "github.com/docker/docker/daemon/graphdriver/zfs",
"symbols": [
"Init"
]
}
]
}
},
{
"package": {
"name": "github.com/moby/moby",
"ecosystem": "Go"
},
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "0"
},
{
"fixed": "20.10.9+incompatible"
}
]
}
],
"ecosystem_specific": {
"imports": [
{
"path": "github.com/moby/moby/daemon",
"symbols": [
"Daemon.create",
"Daemon.setupContainerMountsRoot",
"NewDaemon",
"setupDaemonRoot"
]
},
{
"path": "github.com/moby/moby/daemon/graphdriver/aufs",
"symbols": [
"Init"
]
},
{
"path": "github.com/moby/moby/daemon/graphdriver/btrfs",
"symbols": [
"Driver.Create",
"Init"
]
},
{
"path": "github.com/moby/moby/daemon/graphdriver/fuse-overlayfs",
"symbols": [
"Driver.create",
"Init"
]
},
{
"path": "github.com/moby/moby/daemon/graphdriver/overlay",
"symbols": [
"Driver.Create",
"Init"
]
},
{
"path": "github.com/moby/moby/daemon/graphdriver/overlay2",
"symbols": [
"Driver.create",
"Init"
]
},
{
"path": "github.com/moby/moby/daemon/graphdriver/vfs",
"symbols": [
"Driver.Create",
"Init"
]
},
{
"path": "github.com/moby/moby/daemon/graphdriver/zfs",
"symbols": [
"Init"
]
}
]
}
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://github.com/moby/moby/security/advisories/GHSA-3fwx-pjgw-3558"
},
{
"type": "FIX",
"url": "https://github.com/moby/moby/commit/f0ab919f518c47240ea0e72d0999576bb8008e64"
}
],
"credits": [
{
"name": "Joan Bruguera"
}
],
"database_specific": {
"url": "https://pkg.go.dev/vuln/GO-2024-2500",
"review_status": "REVIEWED"
}
}