Known vulnerabilities in docker-engine

Vendor: openEuler
Software: docker-engine
Software CPE: cpe:2.3:o:openeuler:docker-engine:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 17
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting docker-engine docker-engine is affected by 17 known vulnerabilities: 11 medium, 6 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141444 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-17106		 CWE-22 Low
Available
No
 18.09.0-276 11.08.2026 SB2026081136
SB20260828215
SB2026083035
#VU101384 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-36623		 CWE-362 Low
No
No
 18.09.0-270, 18.09.0-344, 18.09.0-345 10.12.2024 SB2024121031
SB2024121041
SB2024121042
and 8 more
#VU101383 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-36621		 CWE-362 Low
No
No
 18.09.0-270, 18.09.0-344 10.12.2024 SB2024121030
SB2024121039
SB2024121040
and 9 more
#VU94762 - Incorrect Authorization
CVE-2024-41110		 CWE-863 Medium
No
No
 18.09.0-340, 25.0.3-10 26.07.2024 SB2024072641
SB2024080330
SB2024080739
and 39 more
#VU88854 - Security Features
CVE-2024-32473		 CWE-254 Medium
No
No
 18.09.0-265, 18.09.0-336 19.04.2024 SB2024041928
SB2024052037
SB2024052469
and 1 more
#VU87658 - Incorrect Resource Transfer Between Spheres
CVE-2024-29018		 CWE-669 Medium
No
No
 18.09.0-264, 18.09.0-334, 18.09.0-335 20.03.2024 SB2024032036
SB2024041284
SB2024042466
and 24 more
#VU86049 - Insufficient Verification of Data Authenticity
CVE-2024-24557		 CWE-345 Medium
No
No
 18.09.0-263 02.02.2024 SB2024020242
SB2024032237
SB2024032712
and 18 more
#VU74469 - Unprotected Alternate Channel
CVE-2023-28842		 CWE-420 Medium
No
No
 18.09.0-253 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 19 more
#VU74468 - Unprotected Alternate Channel
CVE-2023-28840		 CWE-420 Medium
No
No
 18.09.0-253 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 20 more
#VU74467 - Missing Encryption of Sensitive Data
CVE-2023-28841		 CWE-311 Medium
No
No
 18.09.0-253 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 18 more
#VU72321 - Improper Privilege Management
CVE-2022-36109		 CWE-269 Low
No
No
 18.09.0-243 16.02.2023 SB2023021619
SB2023021620
SB2023031742
and 14 more
#VU64417 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41092		 CWE-200 Medium
No
No
 18.09.0-238 15.06.2022 SB2021100420
SB2022061528
SB2021101264
and 13 more
#VU64416 - Improper preservation of permissions
CVE-2021-41091		 CWE-281 Low
Available
No
 18.09.0-238 15.06.2022 SB2021100419
SB2022061528
SB2021101264
and 13 more
#VU64415 - Improper preservation of permissions
CVE-2021-41089		 CWE-281 Low
No
No
 18.09.0-238 15.06.2022 SB2021100419
SB2022061528
SB2021101264
and 14 more
#VU61600 - Permissions, Privileges, and Access Controls
CVE-2022-24769		 CWE-264 Medium
No
No
 18.09.0-233 24.03.2022 SB2022032414
SB2022032503
SB2022042141
and 29 more
#VU50273 - Permissions, Privileges, and Access Controls
CVE-2021-21284		 CWE-264 Medium
No
No
 18.09.0-202 02.02.2021 SB2021020305
SB2021020611
SB2021020922
and 9 more
#VU50274 - Resource exhaustion
CVE-2021-21285		 CWE-400 Medium
No
No
 18.09.0-202 02.02.2021 SB2021020305
SB2021020611
SB2021020923
and 9 more