Vulnerable Library - github.com/Docker/Docker-v25.0.6+incompatible

Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

Library home page: https://proxy.golang.org/github.com/!docker/!docker/@v/v25.0.6+incompatible.zip

Path to dependency file: /engine/go.mod

Path to vulnerable library: /home/wss-scanner/go/pkg/mod/cache/download/github.com/docker/docker/@v/v25.0.6+incompatible.mod

Dependency Hierarchy:

• ❌ github.com/Docker/Docker-v25.0.6+incompatible (Vulnerable Library)

Found in base branch: master

Vulnerability Details

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.

Publish Date: 2024-11-29

URL: CVE-2024-36620

CVSS 3 Score Details (6.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High