{"id":"GO-2024-2500","summary":"Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker","details":"Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker","aliases":["CVE-2021-41091","GHSA-3fwx-pjgw-3558"],"modified":"2026-03-17T04:50:36.981940Z","published":"2024-06-28T15:28:53Z","related":["CGA-2439-6r3v-c8xw"],"database_specific":{"review_status":"REVIEWED","url":"https://pkg.go.dev/vuln/GO-2024-2500"},"references":[{"type":"ADVISORY","url":"https://github.com/moby/moby/security/advisories/GHSA-3fwx-pjgw-3558"},{"type":"FIX","url":"https://github.com/moby/moby/commit/f0ab919f518c47240ea0e72d0999576bb8008e64"}],"affected":[{"package":{"name":"github.com/docker/docker","ecosystem":"Go","purl":"pkg:golang/github.com/docker/docker"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"20.10.9+incompatible"}]}],"ecosystem_specific":{"imports":[{"symbols":["Daemon.create","Daemon.setupContainerMountsRoot","NewDaemon","setupDaemonRoot"],"path":"github.com/docker/docker/daemon"},{"symbols":["Init"],"path":"github.com/docker/docker/daemon/graphdriver/aufs"},{"symbols":["Driver.Create","Init"],"path":"github.com/docker/docker/daemon/graphdriver/btrfs"},{"symbols":["Driver.create","Init"],"path":"github.com/docker/docker/daemon/graphdriver/fuse-overlayfs"},{"symbols":["Driver.Create","Init"],"path":"github.com/docker/docker/daemon/graphdriver/overlay"},{"symbols":["Driver.create","Init"],"path":"github.com/docker/docker/daemon/graphdriver/overlay2"},{"symbols":["Driver.Create","Init"],"path":"github.com/docker/docker/daemon/graphdriver/vfs"},{"symbols":["Init"],"path":"github.com/docker/docker/daemon/graphdriver/zfs"}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2024-2500.json"}},{"package":{"name":"github.com/moby/moby","ecosystem":"Go","purl":"pkg:golang/github.com/moby/moby"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"20.10.9+incompatible"}]}],"ecosystem_specific":{"imports":[{"symbols":["Daemon.create","Daemon.setupContainerMountsRoot","NewDaemon","setupDaemonRoot"],"path":"github.com/moby/moby/daemon"},{"symbols":["Init"],"path":"github.com/moby/moby/daemon/graphdriver/aufs"},{"symbols":["Driver.Create","Init"],"path":"github.com/moby/moby/daemon/graphdriver/btrfs"},{"symbols":["Driver.create","Init"],"path":"github.com/moby/moby/daemon/graphdriver/fuse-overlayfs"},{"symbols":["Driver.Create","Init"],"path":"github.com/moby/moby/daemon/graphdriver/overlay"},{"symbols":["Driver.create","Init"],"path":"github.com/moby/moby/daemon/graphdriver/overlay2"},{"symbols":["Driver.Create","Init"],"path":"github.com/moby/moby/daemon/graphdriver/vfs"},{"symbols":["Init"],"path":"github.com/moby/moby/daemon/graphdriver/zfs"}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2024-2500.json"}}],"schema_version":"1.7.5","credits":[{"name":"Joan Bruguera"}]}