x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-mq39-4gv4-mvpx

[GoVulnBot]

In GitHub Security Advisory GHSA-mq39-4gv4-mvpx, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/docker/docker	23.0.11	< 23.0.11

Cross references:

• Module github.com/docker/docker appears in issue x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-44gg-pmqr-4669 #625 NOT_IMPORTABLE
• Module github.com/docker/docker appears in issue x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-5qgp-p5jc-w2rm #630 NOT_IMPORTABLE
• Module github.com/docker/docker appears in issue x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-8w94-cf6g-c8mg #636 NOT_IMPORTABLE
• Module github.com/docker/docker appears in issue x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-997c-fj8j-rq5h #640 NOT_IMPORTABLE
• Module github.com/docker/docker appears in issue x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-g44j-7vp3-68cv #647 NOT_IMPORTABLE
• Module github.com/docker/docker appears in issue x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-g7v2-2qxx-wjrw #649 NOT_IMPORTABLE
• Module github.com/docker/docker appears in issue x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-qmmc-jppf-32wv #705 NOT_IMPORTABLE
• Module github.com/docker/docker appears in issue x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-wxj3-qwv4-cvfm #752 NOT_IMPORTABLE
• Module github.com/docker/docker appears in issue x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-j249-ghv5-7mxv #2013 NOT_IMPORTABLE
• Module github.com/docker/docker appears in issue x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-jq35-85cj-fj4p #2161 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/docker/docker
      versions:
        - fixed: 23.0.11
      packages:
        - package: github.com/docker/docker
    - module: github.com/docker/docker
      versions:
        - introduced: 25.0.0
          fixed: 25.0.5
      packages:
        - package: github.com/docker/docker
    - module: github.com/docker/docker
      versions:
        - introduced: 26.0.0-rc1
          fixed: 26.0.0-rc3
      packages:
        - package: github.com/docker/docker
summary: |-
    Moby's external DNS requests from 'internal' networks could lead to data
    exfiltration
cves:
    - CVE-2024-29018
ghsas:
    - GHSA-mq39-4gv4-mvpx
references:
    - advisory: https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx
    - fix: https://github.com/moby/moby/pull/46609
    - advisory: https://github.com/advisories/GHSA-mq39-4gv4-mvpx

[gopherbot]

Change https://go.dev/cl/573815 mentions this issue: data/reports: add GO-2024-2659.yaml

[gopherbot]

Change https://go.dev/cl/573835 mentions this issue: data/reports: add GO-2024-2659.yaml