SUSE-SU-2023:3307-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 14 Aug 2023, 08:52
Last modified:04 Feb 2026, 03:02

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Aug 2023, 08:52
Published
Vulnerability first disclosed
04 Feb 2026, 03:02
Last Modified
Vulnerability information updated

Description

Security update for docker This update for docker fixes the following issues: - Update to v20.10.25-ce - CVE-2023-28840: Fixed a bug where an attacker could inject arbitrary Ethernet frames to execute a Denial of Service attack. (bsc#1214107) - CVE-2023-28841: Fixed a bug which allows an attacker to sit in a trusted position on the network and read all of the application traffic that is moving across the overlay network, resulting in unexpected secrets or user data disclosure (bsc#1214108) - CVE-2023-28842: Fixed a bug which allows an attacker to inject arbitrary Ethernet frames into the encrypted overlay network by encapsulating them in VXLAN datagrams. (bsc#1214109)

Affected Systems

  • suse•docker&distro=SUSE Linux Enterprise Module for Containers 12

    < 20.10.25_ce-98.93.1

References (7)