CVE-2024-41110

一、漏洞信息
漏洞编号：CVE-2024-41110
漏洞归属组件：docker
漏洞归属的版本：18.09.0
CVSS V3.0分值：
BaseScore：9.9 Critical
Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
漏洞简述：
Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.Using a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.A security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.Docker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.docker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.
漏洞公开时间：2024-07-25 01:15:11
漏洞创建时间：2024-07-26 06:36:51
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2024-41110

更多参考(点击展开)

参考来源	参考链接	来源链接
security-advisories.github.com	https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191
security-advisories.github.com	https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76
security-advisories.github.com	https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b4251872919
security-advisories.github.com	https://github.com/moby/moby/commit/852759a7df454cbf88db4e954c919becd48faa9b
security-advisories.github.com	https://github.com/moby/moby/commit/a31260625655cff9ae226b51757915e275e304b0
security-advisories.github.com	https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1
security-advisories.github.com	https://github.com/moby/moby/commit/ae160b4edddb72ef4bd71f66b975a1a1cc434f00
security-advisories.github.com	https://github.com/moby/moby/commit/ae2b3666c517c96cbc2adf1af5591a6b00d4ec0f
security-advisories.github.com	https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801
security-advisories.github.com	https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb
security-advisories.github.com	https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq
security-advisories.github.com	https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin
suse_bugzilla	https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb	https://bugzilla.suse.com/show_bug.cgi?id=1228324
suse_bugzilla	https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1	https://bugzilla.suse.com/show_bug.cgi?id=1228324
suse_bugzilla	https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin/	https://bugzilla.suse.com/show_bug.cgi?id=1228324
debian		https://security-tracker.debian.org/tracker/CVE-2024-41110
github_advisory	https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b4251872919	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://github.com/moby/moby/commit/ae2b3666c517c96cbc2adf1af5591a6b00d4ec0f	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://nvd.nist.gov/vuln/detail/CVE-2024-41110	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://github.com/moby/moby/commit/852759a7df454cbf88db4e954c919becd48faa9b	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://github.com/moby/moby/commit/a31260625655cff9ae226b51757915e275e304b0	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://github.com/moby/moby/commit/ae160b4edddb72ef4bd71f66b975a1a1cc434f00	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191	https://github.com/advisories/GHSA-v23v-6jw2-98fq
github_advisory	https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76	https://github.com/advisories/GHSA-v23v-6jw2-98fq
go	https://nvd.nist.gov/vuln/detail/CVE-2024-41110	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b4251872919	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/commit/852759a7df454cbf88db4e954c919becd48faa9b	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/commit/a31260625655cff9ae226b51757915e275e304b0	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/commit/ae160b4edddb72ef4bd71f66b975a1a1cc434f00	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/commit/ae2b3666c517c96cbc2adf1af5591a6b00d4ec0f	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
go	https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin	https://github.com/golang/vulndb/blob/master/reports/GO-2024-3005.yaml
amazon_linux_explore	https://access.redhat.com/security/cve/CVE-2024-41110	https://explore.alas.aws.amazon.com/CVE-2024-41110.html
amazon_linux_explore	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110	https://explore.alas.aws.amazon.com/CVE-2024-41110.html

漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
其它
漏洞补丁信息：

详情(点击展开)

影响的包	修复版本	修复补丁	问题引入补丁	来源
		https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191		security-advisories.github.com
		https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76		security-advisories.github.com
		https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b4251872919		security-advisories.github.com
		https://github.com/moby/moby/commit/852759a7df454cbf88db4e954c919becd48faa9b		security-advisories.github.com
		https://github.com/moby/moby/commit/a31260625655cff9ae226b51757915e275e304b0		security-advisories.github.com
		https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1		security-advisories.github.com
		https://github.com/moby/moby/commit/ae160b4edddb72ef4bd71f66b975a1a1cc434f00		security-advisories.github.com
		https://github.com/moby/moby/commit/ae2b3666c517c96cbc2adf1af5591a6b00d4ec0f		security-advisories.github.com
		https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801		security-advisories.github.com
		https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb		security-advisories.github.com
		https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb		suse_bugzilla
		https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1		suse_bugzilla
		https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb		github_advisory
		https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1		github_advisory
		https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b4251872919		github_advisory
		https://github.com/moby/moby/commit/ae2b3666c517c96cbc2adf1af5591a6b00d4ec0f		github_advisory
		https://github.com/moby/moby/commit/852759a7df454cbf88db4e954c919becd48faa9b		github_advisory
		https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801		github_advisory
		https://github.com/moby/moby/commit/a31260625655cff9ae226b51757915e275e304b0		github_advisory
		https://github.com/moby/moby/commit/ae160b4edddb72ef4bd71f66b975a1a1cc434f00		github_advisory
		https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191		github_advisory
		https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76		github_advisory
		https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191		go
		https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76		go
		https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b4251872919		go
		https://github.com/moby/moby/commit/852759a7df454cbf88db4e954c919becd48faa9b		go
		https://github.com/moby/moby/commit/a31260625655cff9ae226b51757915e275e304b0		go
		https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1		go
		https://github.com/moby/moby/commit/ae160b4edddb72ef4bd71f66b975a1a1cc434f00		go
		https://github.com/moby/moby/commit/ae2b3666c517c96cbc2adf1af5591a6b00d4ec0f		go
		https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801		go
		https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb		go

二、漏洞分析结构反馈
影响性分析说明：
Docker Authz认证插件用户控制和限制对Docker守护进程的API请求。受影响版本中，攻击者可以使用Content-Length为0的API请求绕过权限检查，导致docker守护进程将没有正文的请求发送到Authz插件，进而导致未授权操作的权限提升。
openEuler评分：
9.9
Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
受影响版本排查(受影响/不受影响)：
1.master(18.09.0):受影响
2.openEuler-20.03-LTS-SP4(18.09.0):受影响
3.openEuler-22.03-LTS-SP1(18.09.0):受影响
4.openEuler-22.03-LTS-SP3(18.09.0):受影响
5.openEuler-22.03-LTS-SP4(18.09.0):受影响
6.openEuler-24.03-LTS(18.09.0):受影响
7.openEuler-24.03-LTS-Next(18.09.0):受影响

修复是否涉及abi变化(是/否)：
1.master(18.09.0):否
2.openEuler-20.03-LTS-SP4(18.09.0):否
3.openEuler-22.03-LTS-SP1(18.09.0):否
4.openEuler-22.03-LTS-SP3(18.09.0):否
5.openEuler-22.03-LTS-SP4(18.09.0):否
6.openEuler-24.03-LTS(18.09.0):否
7.openEuler-24.03-LTS-Next(18.09.0):否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2024-1959

@yangzhao_kl ,@jianminw ,@weibaohui ,@duguhaotian ,@wonleing ,@zhangsong234 ,@xuxuepeng ,@flyflyflypeng ,@zmr_2020 ,@gaodaweiky ,@lu-wei-army 
**issue处理注意事项:** 
**1. 当前issue受影响的分支提交pr时, 须在pr描述中填写当前issue编号进行关联, 否则无法关闭当前issue;**
**2. 模板内容需要填写完整, 无论是受影响或者不受影响都需要填写完整内容,未引入的分支不需要填写, 否则无法关闭当前issue;**
**3. 以下为模板中需要填写完整的内容, 请复制到评论区回复, 注: 内容的标题名称(影响性分析说明, openEuler评分, 受影响版本排查(受影响/不受影响), 修复是否涉及abi变化(是/否))不能省略,省略后cve-manager将无法正常解析填写内容.**
************************************************************************
影响性分析说明:

openEuler评分: (评分和向量)

受影响版本排查(受影响/不受影响): 
1.master(18.09.0):
2.openEuler-20.03-LTS-SP4(18.09.0):
3.openEuler-22.03-LTS-SP1(18.09.0):
4.openEuler-22.03-LTS-SP3(18.09.0):
5.openEuler-22.03-LTS-SP4(18.09.0):
6.openEuler-24.03-LTS(18.09.0):
7.openEuler-24.03-LTS-Next(18.09.0):

修复是否涉及abi变化(是/否)：
1.master(18.09.0):
2.openEuler-20.03-LTS-SP4(18.09.0):
3.openEuler-22.03-LTS-SP1(18.09.0):
4.openEuler-22.03-LTS-SP3(18.09.0):
5.openEuler-22.03-LTS-SP4(18.09.0):
6.openEuler-24.03-LTS(18.09.0):
7.openEuler-24.03-LTS-Next(18.09.0):

-----------------------------------------------------------------------
issue处理具体操作请参考: 
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
pr关联issue具体操作请参考:
https://gitee.com/help/articles/4142

参考网址	关联pr	状态	补丁链接
https://nvd.nist.gov/vuln/detail/CVE-2024-41110	None	None	https://github.com/moby/moby/commit/ae2b3666c517c96cbc2adf1af5591a6b00d4ec0f https://github.com/moby/moby/commit/a31260625655cff9ae226b51757915e275e304b0 https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76 https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1 https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b4251872919 https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191 https://github.com/moby/moby/commit/852759a7df454cbf88db4e954c919becd48faa9b https://github.com/moby/moby/commit/ae160b4edddb72ef4bd71f66b975a1a1cc434f00 https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801 https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb
https://ubuntu.com/security/CVE-2024-41110	None	None	https://discourse.ubuntu.com/c/ubuntu-pro
https://www.opencve.io/cve/CVE-2024-41110	None	None	https://github.com/moby/moby/commit/ae2b3666c517c96cbc2adf1af5591a6b00d4ec0f https://github.com/moby/moby/commit/a31260625655cff9ae226b51757915e275e304b0 https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76 https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1 https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b4251872919 https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191 https://github.com/moby/moby/commit/852759a7df454cbf88db4e954c919becd48faa9b https://github.com/moby/moby/commit/ae160b4edddb72ef4bd71f66b975a1a1cc434f00 https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801 https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2024-41110
https://security-tracker.debian.org/tracker/CVE-2024-41110

说明：补丁链接仅供初步排查参考，实际可用性请人工再次确认，补丁下载验证可使用CVE补丁工具。
若补丁不准确，烦请在此issue下评论 '/report-patch 参考网址补丁链接1,补丁链接2' 反馈正确信息，便于我们不断优化工具，不胜感激。
如 /report-patch https://security-tracker.debian.org/tracker/CVE-2021-3997 https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1

影响性分析说明：
Docker Authz认证插件用户控制和限制对Docker守护进程的API请求。
受影响版本中，攻击者可以使用Content-Length为0的API请求绕过权限检查，导致docker守护进程将没有正文的请求发送到Authz插件，进而导致未授权操作的权限提升。
openEuler评分：
9.9
Vector：CVSS：3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
受影响版本排查(受影响/不受影响)：
1.master(18.09.0):受影响
2.openEuler-20.03-LTS-SP4(18.09.0):受影响
3.openEuler-22.03-LTS-SP1(18.09.0):受影响
4.openEuler-22.03-LTS-SP3(18.09.0):受影响
5.openEuler-22.03-LTS-SP4(18.09.0):受影响
6.openEuler-24.03-LTS(18.09.0):受影响
7.openEuler-24.03-LTS-Next(18.09.0):受影响

修复是否涉及abi变化(是/否)：
1.master(18.09.0):否
2.openEuler-20.03-LTS-SP4(18.09.0):否
3.openEuler-22.03-LTS-SP1(18.09.0):否
4.openEuler-22.03-LTS-SP3(18.09.0):否
5.openEuler-22.03-LTS-SP4(18.09.0):否
6.openEuler-24.03-LTS(18.09.0):否
7.openEuler-24.03-LTS-Next(18.09.0):否

@ 经过 cve-manager 解析, 已分析的内容如下表所示:

状态	需分析	内容
已分析	1.影响性分析说明	Docker Authz认证插件用户控制和限制对Docker守护进程的API请求。受影响版本中，攻击者可以使用Content-Length为0的API请求绕过权限检查，导致docker守护进程将没有正文的请求发送到Authz插件，进而导致未授权操作的权限提升。
已分析	2.openEulerScore	9.9
已分析	3.openEulerVector	AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
已分析	4.受影响版本排查	master:受影响,openEuler-20.03-LTS-SP4:受影响,openEuler-22.03-LTS-SP1:受影响,openEuler-22.03-LTS-SP3:受影响,openEuler-22.03-LTS-SP4:受影响,openEuler-24.03-LTS:受影响,openEuler-24.03-LTS-Next:受影响
已分析	5.修复是否涉及abi变化	master:否,openEuler-20.03-LTS-SP4:否,openEuler-22.03-LTS-SP1:否,openEuler-22.03-LTS-SP3:否,openEuler-22.03-LTS-SP4:否,openEuler-24.03-LTS:否,openEuler-24.03-LTS-Next:否

请确认分析内容的准确性, 确认无误后, 您可以进行后续步骤, 否则您可以继续分析.

src-openEuler/docker

内容风险标识

评论 (5)

src-openEuler/docker .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2024-41110

评论 (5)

搜索帮助

src-openEuler/docker