{"id":"GO-2024-2500","summary":"Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker","details":"Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker","aliases":["CVE-2021-41091","GHSA-3fwx-pjgw-3558"],"modified":"2026-02-04T03:22:20.424113Z","published":"2024-06-28T15:28:53Z","related":["CGA-2439-6r3v-c8xw"],"database_specific":{"review_status":"REVIEWED","url":"https://pkg.go.dev/vuln/GO-2024-2500"},"references":[{"type":"ADVISORY","url":"https://github.com/moby/moby/security/advisories/GHSA-3fwx-pjgw-3558"},{"type":"FIX","url":"https://github.com/moby/moby/commit/f0ab919f518c47240ea0e72d0999576bb8008e64"}],"affected":[{"package":{"name":"github.com/docker/docker","ecosystem":"Go","purl":"pkg:golang/github.com/docker/docker"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"20.10.9+incompatible"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/docker/docker/daemon","symbols":["Daemon.create","Daemon.setupContainerMountsRoot","NewDaemon","setupDaemonRoot"]},{"path":"github.com/docker/docker/daemon/graphdriver/aufs","symbols":["Init"]},{"path":"github.com/docker/docker/daemon/graphdriver/btrfs","symbols":["Driver.Create","Init"]},{"path":"github.com/docker/docker/daemon/graphdriver/fuse-overlayfs","symbols":["Driver.create","Init"]},{"path":"github.com/docker/docker/daemon/graphdriver/overlay","symbols":["Driver.Create","Init"]},{"path":"github.com/docker/docker/daemon/graphdriver/overlay2","symbols":["Driver.create","Init"]},{"path":"github.com/docker/docker/daemon/graphdriver/vfs","symbols":["Driver.Create","Init"]},{"path":"github.com/docker/docker/daemon/graphdriver/zfs","symbols":["Init"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2024-2500.json"}},{"package":{"name":"github.com/moby/moby","ecosystem":"Go","purl":"pkg:golang/github.com/moby/moby"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"20.10.9+incompatible"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/moby/moby/daemon","symbols":["Daemon.create","Daemon.setupContainerMountsRoot","NewDaemon","setupDaemonRoot"]},{"path":"github.com/moby/moby/daemon/graphdriver/aufs","symbols":["Init"]},{"path":"github.com/moby/moby/daemon/graphdriver/btrfs","symbols":["Driver.Create","Init"]},{"path":"github.com/moby/moby/daemon/graphdriver/fuse-overlayfs","symbols":["Driver.create","Init"]},{"path":"github.com/moby/moby/daemon/graphdriver/overlay","symbols":["Driver.Create","Init"]},{"path":"github.com/moby/moby/daemon/graphdriver/overlay2","symbols":["Driver.create","Init"]},{"path":"github.com/moby/moby/daemon/graphdriver/vfs","symbols":["Driver.Create","Init"]},{"path":"github.com/moby/moby/daemon/graphdriver/zfs","symbols":["Init"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2024-2500.json"}}],"schema_version":"1.7.3","credits":[{"name":"Joan Bruguera"}]}