There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and
    repeatable manner. In affected versions when the user sends a build request that contains a Git URL that
    contains credentials and the build creates a provenance attestation describing that build, these
    credentials could be visible from the provenance attestation. Git URL can be passed in two ways: 1)
    Invoking build directly from a URL with credentials. 2) If the client sends additional version control
    system (VCS) info hint parameters on builds from a local source. Usually, that would mean reading the
    origin URL from `.git/config` file. When a build is performed under specific conditions where credentials
    were passed to BuildKit they may be visible to everyone who has access to provenance attestation.
    Provenance attestations and VCS info hints were added in version v0.11.0. Previous versions are not
    vulnerable. In v0.10, when building directly from Git URL, the same URL could be visible in `BuildInfo`
    structure that is a predecessor of Provenance attestations. Previous versions are not vulnerable. This bug
    has been fixed in v0.11.4. Users are advised to upgrade. Users unable to upgrade may disable VCS info
    hints by setting `BUILDX_GIT_INFO=0`. `buildctl` does not set VCS hints based on `.git` directory, and
    values would need to be passed manually with `--opt`. (CVE-2023-26054)

遠端主機受到 GLSA-202409-29 中所述的弱點影響 (Docker：多個弱點)

    在 Docker 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼。

Tenable 已直接從 Gentoo Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程主机受到 GLSA-202409-29 中所述漏洞影响（Docker：多个漏洞）

    在 Docker 中发现多个漏洞。请检查下方引用的 CVE 标识符以了解详细信息。

Tenable 已直接从 Gentoo Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The remote host is affected by the vulnerability described in GLSA-202409-29 (Docker: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Docker. Please review the CVE identifiers referenced     below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b9c1d0e4c5 advisory.

    - Update moby-engine to 24.0.5
    - Security fix for CVE-2021-41803
    - Security fix for CVE-2023-28842
    - Security fix for CVE-2023-28841
    - Security fix for CVE-2023-28840
    - Security fix for CVE-2023-0845
    - Security fix for CVE-2023-26054
    - Security fix for CVE-2022-3064
    - Security fix for CVE-2022-40716
    - Security fix for CVE-2023-25173


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-cf3551046d advisory.

    - Update moby-engine to 24.0.5
    - Security fix for CVE-2021-41803
    - Security fix for CVE-2023-28842
    - Security fix for CVE-2023-28841
    - Security fix for CVE-2023-28840
    - Security fix for CVE-2023-0845
    - Security fix for CVE-2023-26054
    - Security fix for CVE-2022-3064
    - Security fix for CVE-2022-40716
    - Security fix for CVE-2023-25173

    ----

    Update moby-engine to 23.0.4

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9f5f1ef40a advisory.

    - Update moby-engine to 24.0.5
    - Security fix for CVE-2021-41803
    - Security fix for CVE-2023-28842
    - Security fix for CVE-2023-28841
    - Security fix for CVE-2023-28840
    - Security fix for CVE-2023-0845
    - Security fix for CVE-2023-26054
    - Security fix for CVE-2022-3064
    - Security fix for CVE-2022-40716
    - Security fix for CVE-2023-25173

    ----

    Update moby-engine to 23.0.4


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
404111	Alpine: multiple docker packages: security update to 23.0.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	medium
404111	Alpine: multiple docker packages: security update to 23.0.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	medium
415058	SCA: security update for github.com/moby/buildkit (GHSA-gc89-7gcr-jxqc)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	medium
415058	SCA: security update for github.com/moby/buildkit (GHSA-gc89-7gcr-jxqc)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	medium
207893	GLSA-202409-29：Docker：多個弱點	Nessus	Gentoo Local Security Checks	2024/9/28	2024/9/28	critical
207893	GLSA-202409-29：Docker：多个漏洞	Nessus	Gentoo Local Security Checks	2024/9/28	2024/9/28	critical
185286	Fedora 39 : moby-engine (2023-b9c1d0e4c5)	Nessus	Fedora Local Security Checks	2023/11/7	2024/11/14	high
180494	Fedora 37: moby-engine (2023-cf3551046d)	Nessus	Fedora Local Security Checks	2023/9/5	2024/11/14	high
180265	Fedora 38 : moby-engine (2023-9f5f1ef40a)	Nessus	Fedora Local Security Checks	2023/8/30	2024/11/14	high
207893	GLSA-202409-29 : Docker: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2024/9/28	2024/9/28	critical
185286	Fedora 39 : moby-engine (2023-b9c1d0e4c5)	Nessus	Fedora Local Security Checks	2023/11/7	2024/11/14	high
180494	Fedora 37 : moby-engine (2023-cf3551046d)	Nessus	Fedora Local Security Checks	2023/9/5	2024/11/14	high
180265	Fedora 38 : moby-engine (2023-9f5f1ef40a)	Nessus	Fedora Local Security Checks	2023/8/30	2024/11/14	high

检测

插件搜索

medium

medium

medium

medium

critical

critical

high

high

high

critical

high

high

high