Moby and Open Container Initiative Release Critical Updates for Multiple Vulnerabilities Affecting Docker-related Components

Summary:

Moby and the Open Container Initiative (OCI) have disclosed updates addressing multiple vulnerabilities (CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-21626) affecting Docker-related components, including Moby BuildKit and OCI runc. These vulnerabilities could be exploited by a cyber threat actor to gain control of an affected system. CISA advises users and administrators to review advisories, a Snyk blog post, and apply necessary updates to mitigate the risks.