UpHeron
All vulnerabilities

Servers and applications

CVE-2025-54388

Firewalld reload makes published container ports accessible from remote hosts

Severity
Medium 5.1
Published
29 Jul 2025
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
28.3.3
Also known as
GHSA-x4rx-4gw3-53p4
Sources
NVD, Project advisories (GitHub)

Description

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it removes all iptables rules including those created by Docker. While Docker should automatically recreate these rules, versions before…

Affected software

SoftwareAffected versions
Docker EngineServers and applications · cpe:a:mobyproject:moby
  • From 28.2.0 before 28.3.3
Docker EngineServers and applications · github:moby/moby
  • Version 28.2.x
  • Version 28.3.0
  • Version 28.3.1
  • Version 28.3.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-54388
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-54388
  • GitHub Advisory Database https://github.com/advisories/GHSA-x4rx-4gw3-53p4
  • github.com https://github.com/moby/moby/security/advisories/GHSA-x4rx-4gw3-53p4