UpHeron
All vulnerabilities

Servers and applications

CVE-2024-29018

External DNS requests from 'internal' networks could lead to data exfiltration

Severity
High 7.5
Published
19 Mar 2024
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
23.0.11, 25.0.5, 26.0.0-rc3
Also known as
GHSA-mq39-4gv4-mvpx
Sources
NVD, Project advisories (GitHub)

Description

Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature is frequently referred to as custom networks, as each network can have a different driver, set of…

Affected software

SoftwareAffected versions
Docker EngineServers and applications · cpe:a:mobyproject:moby
  • Every version before 23.0.11
  • From 24.0.0 before 25.0.5
  • Version 26.0.0-rc1
  • Version 26.0.0-rc2
  • Version 26.0.0-rc3
Docker EngineServers and applications · github:moby/moby
  • Every version before 26.0.0-rc3
  • Every version before 25.0.5
  • Every version before 23.0.11

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-29018
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-29018
  • GitHub Advisory Database https://github.com/advisories/GHSA-mq39-4gv4-mvpx
  • github.com https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx