Known vulnerabilities in moby-engine
Vendor:
Fedoraproject
Software:
moby-engine
Software CPE:
cpe:2.3:o:fedoraproject:moby-engine:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
33
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
29.6.2-1.fc43
29.6.2-1.fc44
29.6.2-1.fc45
29.6.0-1.fc43
29.6.0-1.fc44
29.6.0-1.fc45
29.4.0-1.fc42
29.4.0-1.fc43
29.4.0-1.fc44
29.4.0-1.fc45
28.5.1-1.fc44
28.3.3-1.fc41
28.3.3-1.fc42
28.2.2-1.fc43
19.03.11-1.ce.git42e35e6.fc31
19.03.11-1.ce.git42e35e6.fc32
18.06.0-2.ce.git0ffa825.fc28
18.06.0-2.ce.git0ffa825.fc29
28.0.2-1.fc43
20.10.21-1.fc36
20.10.21-1.fc37
20.10.20-1.fc37
20.10.20-1.fc36
20.10.18-1.fc36
20.10.18-1.fc37
20.10.17-5.fc36
20.10.17-4.fc35
20.10.17-3.fc36
20.10.17-3.fc37
20.10.17-2.fc35
20.10.17-2.fc36
20.10.17-1.fc35
20.10.17-1.fc36
20.10.14-1.fc36
20.10.14-1.fc34
20.10.14-1.fc35
20.10.11-1.fc34
20.10.11-1.fc35
20.10.11-1.fc36
20.10.10-1.fc34
20.10.10-1.fc35
20.10.9-1.fc34
20.10.9-1.fc35
24.0.5-1.fc38
24.0.5-1.fc37
24.0.5-1.fc39
20.10.22-1.fc37
Vulnerabilities (33)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134889 - Resource exhaustion CVE-2026-47262 |
CWE-400 | Low | 29.6.2-1.fc43, 29.6.2-1.fc44, 29.6.2-1.fc45 | 19.06.2026 |
SB2026061902 SB2026070290 SB2026070980 and 11 more |
||
| #VU125945 - Improper input validation CVE-2026-34986 |
CWE-20 | Medium | 29.4.0-1.fc42, 29.4.0-1.fc43, 29.4.0-1.fc44, 29.4.0-1.fc45 | 14.04.2026 |
SB2026041463 SB2026041464 SB2026041465 and 73 more |
||
| #VU105983 - Resource exhaustion CVE-2025-30204 |
CWE-400 | Medium | 28.2.2-1.fc43 | 24.03.2025 |
SB2025032475 SB2025032730 SB2025040333 and 97 more |
||
| #VU105799 - Integer overflow CVE-2024-40635 |
CWE-190 | Low | 28.0.2-1.fc43, 28.2.2-1.fc43 | 17.03.2025 |
SB20250317125 SB2025031862 SB2025032001 and 19 more |
||
| #VU80038 - Improper input validation CVE-2023-0845 |
CWE-20 | Medium | 24.0.5-1.fc37, 24.0.5-1.fc38, 24.0.5-1.fc39 | 28.08.2023 |
SB2023082823 SB2023082830 SB2023082831 and 2 more |
||
| #VU80034 - Unchecked Return Value CVE-2022-40716 |
CWE-252 | Low | 24.0.5-1.fc37, 24.0.5-1.fc38, 24.0.5-1.fc39 | 28.08.2023 |
SB2022092687 SB2023082830 SB2023082831 and 6 more |
||
| #VU80033 - Missing Authorization CVE-2021-41803 |
CWE-862 | Medium | 24.0.5-1.fc37, 24.0.5-1.fc38, 24.0.5-1.fc39 | 28.08.2023 |
SB2022092412 SB2023082830 SB2023082831 and 1 more |
||
| #VU76839 - Server-Side Request Forgery (SSRF) CVE-2022-29153 |
CWE-918 | Medium | 20.10.21-1.fc36, 20.10.21-1.fc37, 20.10.22-1.fc37 | 05.06.2023 |
SB2023060515 SB2023010241 SB2023091924 and 8 more |
||
| #VU74469 - Unprotected Alternate Channel CVE-2023-28842 |
CWE-420 | Medium | 24.0.5-1.fc37, 24.0.5-1.fc38, 24.0.5-1.fc39 | 05.04.2023 |
SB2023040505 SB2023062140 SB2023080920 and 19 more |
||
| #VU74468 - Unprotected Alternate Channel CVE-2023-28840 |
CWE-420 | Medium | 24.0.5-1.fc37, 24.0.5-1.fc38, 24.0.5-1.fc39 | 05.04.2023 |
SB2023040505 SB2023062140 SB2023080920 and 20 more |
||
| #VU74467 - Missing Encryption of Sensitive Data CVE-2023-28841 |
CWE-311 | Medium | 24.0.5-1.fc37, 24.0.5-1.fc38, 24.0.5-1.fc39 | 05.04.2023 |
SB2023040505 SB2023062140 SB2023080920 and 18 more |
||
| #VU74150 - Insufficiently Protected Credentials CVE-2023-26054 |
CWE-522 | Medium | 24.0.5-1.fc37, 24.0.5-1.fc38, 24.0.5-1.fc39 | 28.03.2023 |
SB2023032877 SB2023032878 SB2023061543 and 6 more |
||
| #VU72321 - Improper Privilege Management CVE-2022-36109 |
CWE-269 | Low | 20.10.18-1.fc36, 20.10.18-1.fc37 | 16.02.2023 |
SB2023021619 SB2023021620 SB2023031742 and 14 more |
||
| #VU72320 - Improper Privilege Management CVE-2023-25173 |
CWE-269 | Low | 24.0.5-1.fc37, 24.0.5-1.fc38, 24.0.5-1.fc39 | 16.02.2023 |
SB2023021620 SB2023050808 SB2023051069 and 52 more |
||
| #VU72314 - Resource exhaustion CVE-2022-3064 |
CWE-400 | Medium | 24.0.5-1.fc37, 24.0.5-1.fc38, 24.0.5-1.fc39 | 16.02.2023 |
SB2023021601 SB2023021602 SB2023022185 and 37 more |
||
| #VU70039 - Resource exhaustion CVE-2022-23471 |
CWE-400 | Medium | 20.10.21-1.fc37 | 08.12.2022 |
SB2022120802 SB2022121324 SB2022122112 and 27 more |
||
| #VU69422 - Exposure of sensitive information to an unauthorized actor CVE-2022-3920 |
CWE-200 | Medium | 20.10.21-1.fc36, 20.10.22-1.fc37 | 18.11.2022 |
SB2022111823 SB2023010241 SB2022121635 and 4 more |
||
| #VU68517 - Improper input validation CVE-2022-39253 |
CWE-20 | Low | 20.10.20-1.fc36, 20.10.20-1.fc37 | 19.10.2022 |
SB2022101995 SB2022101996 SB2022101997 and 41 more |
||
| #VU64269 - Integer overflow CVE-2022-28327 |
CWE-190 | Low | 20.10.17-3.fc36, 20.10.17-3.fc37, 20.10.17-4.fc35 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061506 and 90 more |
||
| #VU61599 - Improper input validation CVE-2022-21698 |
CWE-20 | Medium | 20.10.17-3.fc36, 20.10.17-4.fc35 | 24.03.2022 |
SB2022021530 SB2022032413 SB2022040807 and 110 more |
Showing elements 1 - 20 out of 33