CVE-2024-36620

Summary

CVE-2024-36620 is a newly disclosed vulnerability affecting moby versions 25.0.0 to 26.0.2. The issue arises due to a NULL pointer dereference in the daemon/images/image_history.go file. This flaw can lead to crashes or even arbitrary code execution, depending on the attacker's capabilities and the context of the exploit. An attacker could potentially take advantage of this vulnerability to gain unauthorized access, install malware, or disrupt container operations in a Docker environment. It is crucial that users upgrade to a patched version of moby as soon as possible to mitigate the risk associated with this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.