CVE-2025-54410

一、漏洞信息
 漏洞编号：[CVE-2025-54410](https://nvd.nist.gov/vuln/detail/CVE-2025-54410)
 漏洞归属组件：[moby](https://gitee.com/src-openeuler/moby)
 漏洞归属的版本：20.10.24,25.0.3,25.0.7
 CVSS V3.0分值：
  BaseScore：5.2 Medium
  Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
 漏洞简述：
  Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create iptables rules that isolate bridge networks, allowing any container to access all ports on any other container across different bridge networks on the same host. This breaks network segmentation between containers that should be isolated, creating significant risk in multi-tenant environments. Only containers in --internal networks remain protected.Workarounds include reloading firewalld and either restarting the docker daemon, re-creating bridge networks, or using rootless mode. Maintainers anticipate a fix for this issue in version 25.0.13.
 漏洞公开时间：2025-07-30 22:15:28
 漏洞创建时间：2025-07-29 19:43:58
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-54410
<details>
<summary>更多参考(点击展开)</summary>

无
</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>

二、漏洞分析结构反馈
 影响性分析说明：
                                      
 openEuler评分：
  3.3
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
 受影响版本排查(受影响/不受影响)：
  1.master(25.0.7):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS(25.0.3):
6.openEuler-24.03-LTS-Next(25.0.3):
7.openEuler-24.03-LTS-SP1(25.0.3):
8.openEuler-24.03-LTS-SP2(25.0.3):

修复是否涉及abi变化(是/否)：
  1.master(25.0.7):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS(25.0.3):
6.openEuler-24.03-LTS-Next(25.0.3):
7.openEuler-24.03-LTS-SP1(25.0.3):
8.openEuler-24.03-LTS-SP2(25.0.3):

原因说明：
  1.master(25.0.7):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS(25.0.3):
6.openEuler-24.03-LTS-Next(25.0.3):
7.openEuler-24.03-LTS-SP1(25.0.3):
8.openEuler-24.03-LTS-SP2(25.0.3):

src-openEuler/moby

Content Risk Flag

Comments (1)

src-openEuler/moby .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2025-54410

Comments (1)

Search

src-openEuler/moby