<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-02T11:05:09.582631+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2021-01892</id>
    <title>bdu:2021-01892</title>
    <updated>2026-10-02T11:05:09.603488+00:00</updated>
    <content>bdu:2021-01892</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2021-01892"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2021-21285</id>
    <title>Withdrawn: BELL-CVE-2021-21285 — CVE-2021-21285 does not affect BellSoft software</title>
    <updated>2026-10-02T11:05:09.603526+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>
          <strong>Withdrawn by the publisher.</strong>
        </p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2021-21285"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2021-avi-490</id>
    <title>certfr-2021-avi-490 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum
Protect. Certaines d'entre elles permettent à un atta…</title>
    <updated>2026-10-02T11:05:09.603545+00:00</updated>
    <content>certfr-2021-avi-490</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2021-avi-490"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cleanstart-2026-bk59402</id>
    <title>Withdrawn: CLEANSTART-2026-BK59402 — Moby is an open-source project created by Docker for software containerization</title>
    <updated>2026-10-02T11:05:09.603561+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Withdrawn by the publisher.</strong></p>
<p><strong>Affected:</strong> CleanStart: docker</p>
<p>Multiple security vulnerabilities affect the docker package. Moby is an open-source project created by Docker for software containerization. See references for individual vulnerability details.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/cleanstart-2026-bk59402"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cnvd-2021-27276</id>
    <title>cnvd-2021-27276</title>
    <updated>2026-10-02T11:05:09.603589+00:00</updated>
    <content>cnvd-2021-27276</content>
    <link href="https://cve.radiocsirt.org/vuln/cnvd-2021-27276"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-22075</id>
    <title>EUVD-2026-22075</title>
    <updated>2026-10-02T11:05:09.603602+00:00</updated>
    <content>EUVD-2026-22075</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-22075"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2021-21285</id>
    <title>fkie_cve-2021-21285</title>
    <updated>2026-10-02T11:05:09.603612+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2021-21285"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-6fj5-m822-rqx8</id>
    <title>GHSA-6fj5-m822-rqx8 — moby docker daemon crash during image pull of malicious image</title>
    <updated>2026-10-02T11:05:09.603633+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Go: github.com/moby/moby</p>
<p>### Impact</p>
<p>Pulling an intentionally malformed Docker image manifest crashes the `dockerd` daemon.</p>
<p>### Patches</p>
<p>Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.</p>
<p>### Credits</p>
<p>Maintainers would like to thank Josh Larsen, Ian Coldwater, Duffie Cooley, Rory McCune for working on the vulnerability and Brad Geesaman for responsibly disclosing it to security@docker.com.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-6fj5-m822-rqx8"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2021-21285</id>
    <title>gsd-2021-21285</title>
    <updated>2026-10-02T11:05:09.603658+00:00</updated>
    <content>gsd-2021-21285</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2021-21285"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2021-21285</id>
    <title>msrc_CVE-2021-21285 — Docker daemon crash during image pull of malicious image</title>
    <updated>2026-10-02T11:05:09.603670+00:00</updated>
    <content>msrc_CVE-2021-21285</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2021-21285"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2021-1102</id>
    <title>OESA-2021-1102 — docker security update</title>
    <updated>2026-10-02T11:05:09.603684+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:20.03-LTS: docker, openEuler:20.03-LTS-SP1: docker</p>
<p>Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance and everything in between - and they don't require you to use a particular language, framework or packaging system. That makes them great building blocks for deploying and scaling web apps, databases, and backend services without depending on a particular stack or provider.

Security Fix(es):

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root. When using --userns-remap, if the root user in the remapped namespace has access to the host filesystem they can modify files under /var/lib/docker/&amp;lt;remapping&amp;gt; that cause writing files with extended privileges. Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user.(CVE-2021-21284)

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.(CVE-2021-21285)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2021-1102"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2021:0278-1</id>
    <title>openSUSE-SU-2021:0278-1 — Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork</title>
    <updated>2026-10-02T11:05:09.603714+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2021:0278-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2021:0435-1</id>
    <title>SUSE-SU-2021:0435-1 — Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork</title>
    <updated>2026-10-02T11:05:09.603731+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2021:0435-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-21285</id>
    <title>UBUNTU-CVE-2021-21285</title>
    <updated>2026-10-02T11:05:09.603745+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: docker.io, Ubuntu:18.04:LTS: docker.io, Ubuntu:20.04:LTS: docker.io</p>
<p>In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-21285"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2716</id>
    <title>WID-SEC-W-2023-2716 — docker: Mehrere Schwachstellen</title>
    <updated>2026-10-02T11:05:09.603765+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in docker ausnutzen, um seine Privilegien zu erhöhen und um einen Denial of Service Angriff durchzuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2716"/>
  </entry>
</feed>
