SUSE-SU-2023:3307-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2023:3307-1

Related

Published

2023-08-14T08:52:14Z

Modified

2023-08-14T08:52:14Z

Summary

Security update for docker

Details

This update for docker fixes the following issues:

Update to v20.10.25-ce
CVE-2023-28840: Fixed a bug where an attacker could inject arbitrary Ethernet frames to execute a Denial of Service attack. (bsc#1214107)
CVE-2023-28841: Fixed a bug which allows an attacker to sit in a trusted position on the network and read all of the application traffic that is moving across the overlay network, resulting in unexpected secrets or user data disclosure (bsc#1214108)
CVE-2023-28842: Fixed a bug which allows an attacker to inject arbitrary Ethernet frames into the encrypted overlay network by encapsulating them in VXLAN datagrams. (bsc#1214109)

References

Affected packages

Name: docker
Purl: purl:rpm/suse/docker&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20.10.25_ce-98.93.1

{
    "binaries": [
        {
            "docker": "20.10.25_ce-98.93.1"
        }
    ]
}