-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGoMiggo AIRoot Cause AnalysisThe vulnerability stems from directory creation calls using 0701 permissions (world-executable) instead of 0710 (group-restricted). The patched commit shows multiple instances where these functions were modified across storage drivers and daemon components. The 0701 permission allowed any user to traverse directories under /var/lib/docker, while 0710 properly restricts access to the docker group. Key functions identified are idtools.MkdirAllAndChown and idtools.MkdirAndChown with the vulnerable permission patterns, found in multiple files handling Docker's data directory structure creation.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/moby/moby | go | < 20.10.9 | 20.10.9 |
| github.com/docker/docker | go | < 20.10.9 | 20.10.9 |