UpHeron
All vulnerabilities

Servers and applications

CVE-2023-28840

Encrypted overlay network may be unauthenticated

Severity
High 8.7
Published
4 Apr 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
20.10.24, 23.0.3
Also known as
GHSA-232p-vwff-86mp
Sources
NVD, Project advisories (GitHub)

Description

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby, is commonly referred to as *Docker*. Swarm Mode, which is compiled in and delivered by default in dockerd and is thus present in most major Moby…

Affected software

SoftwareAffected versions
Docker EngineServers and applications · cpe:a:mobyproject:moby
  • From 1.12.0 before 20.10.24
  • From 23.0.0 before 23.0.3
Docker EngineServers and applications · github:moby/moby
  • From 1.12 before 23.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-28840
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-28840
  • GitHub Advisory Database https://github.com/advisories/GHSA-232p-vwff-86mp
  • github.com https://github.com/moby/moby/security/advisories/GHSA-232p-vwff-86mp