StackRadar

CVE-2024-29018

High

Advisory

Published 20 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
290
of 17,781 indexed, latest versions
Container images
262
deployed by those charts
Fix available
1 of 2
affected packages

Moby's external DNS requests from 'internal' networks could lead to data exfiltration

Carried by container images the latest versions of 290 of 17,781 indexed charts deploy, on 262 images.

Affected packageAffected versionsFixed inImages
docker.iodeb20.10.24+dfsg1-1+deb12u1+b6no fix listed1
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+41 more23.0.11, 25.0.5261
OSV records
DEBIAN-CVE-2024-29018GHSA-mq39-4gv4-mvpx
Also known as
GO-2024-2659

Charts affected

290 by stars
ChartLatestAffected imagesRadar Score
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/docker/docker@v20.10.12+incompatible
23.0.11

Open the chart page →

2,453
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/docker/docker@v20.10.12+incompatible
23.0.11

Open the chart page →

16,251
linkerd-jaegerlinkerd2Verified publisher30.12.111 of 4See more

linkerd-jaeger linkerd2 30.12.11

1 of the 4 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/docker/docker@v20.10.17+incompatible
23.0.11

Open the chart page →

4,405
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/docker/docker@v20.10.17+incompatible
23.0.11

Open the chart page →

4,167
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/docker@v20.10.17+incompatible
23.0.11

Open the chart page →

32,902
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/docker@v20.10.9+incompatible
23.0.11

Open the chart page →

14,893
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
github.com/docker/docker@v23.0.3+incompatible
23.0.11

Open the chart page →

5,630
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
github.com/docker/docker@v20.10.20+incompatible
23.0.11

Open the chart page →

6,849
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
github.com/docker/docker@v20.10.24+incompatible
23.0.11

Open the chart page →

4,531
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
github.com/docker/docker@v20.10.24+incompatible
23.0.11

Open the chart page →

2,344
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/docker/docker@v1.13.1
23.0.11

Open the chart page →

2,409
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/docker/docker@v20.10.21+incompatible
23.0.11

Open the chart page →

1,698
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
library/traefik:2.5.47d0228d19042
github.com/docker/docker@v17.12.0-ce-rc1.0.20200204220554-5f6d6f3f2203+incompatible
23.0.11

Open the chart page →

52,919
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
github.com/docker/docker@v20.10.21+incompatible
23.0.11

Open the chart page →

14,094
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
library/docker:20-dindaf96c680a7e1
github.com/docker/docker@v23.0.0-rc.1+incompatible
23.0.11

Open the chart page →

5,674
kubeflowkubeflow1.6.22 of 45See more

kubeflow kubeflow 1.6.2

2 of the 45 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
istio/proxyv2:1.14.1df69c1a7af7c
github.com/docker/docker@v20.10.12+incompatible
23.0.11
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
github.com/docker/docker@v20.10.12+incompatible
23.0.11

Open the chart page →

96,941
openelbkubesphere-stable0.5.01 of 2See more

openelb kubesphere-stable 0.5.0

1 of the 2 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.5.0b5b665c4672c
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
23.0.11

Open the chart page →

4,329
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.24d9fce2c050e
github.com/docker/docker@v23.0.3+incompatible
23.0.11

Open the chart page →

19,337
aperture-controlleraperture2.34.01 of 5See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/docker/docker@v20.10.12+incompatible
23.0.11

Open the chart page →

4,663
prometheusaveshaVerified publisher19.3.01 of 4See more

prometheus avesha 19.3.0

1 of the 4 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/docker/docker@v20.10.21+incompatible
23.0.11

Open the chart page →

5,484
cert-managerchoerodon1.8.21 of 4See more

cert-manager choerodon 1.8.2

1 of the 4 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/docker/docker@v20.10.12+incompatible
23.0.11

Open the chart page →

7,775
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
github.com/docker/docker@v20.10.8+incompatible
23.0.11

Open the chart page →

3,080
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/docker@v23.0.3+incompatible
23.0.11

Open the chart page →

11,582
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/docker/docker@v20.10.21+incompatible
23.0.11

Open the chart page →

3,675
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/docker/docker@v23.0.3+incompatible
23.0.11

Open the chart page →

3,793
knative-servingsoftonic3.0.01 of 5See more

knative-serving softonic 3.0.0

1 of the 5 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned30ce73388ae5
github.com/docker/docker@v1.13.1
23.0.11

Open the chart page →

12,502
sn-platformstreamnative1.11.442 of 9See more

sn-platform streamnative 1.11.44

2 of the 9 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/docker/docker@v20.10.10+incompatible
23.0.11
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/docker/docker@v23.0.1+incompatible
23.0.11

Open the chart page →

15,477
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
library/docker:20.10.21-dind3153fa63f546
github.com/docker/docker@v20.10.3-0.20221021173910-5aac513617f0+incompatible
23.0.11

Open the chart page →

28,534
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
github.com/docker/docker@v20.10.7+incompatible
23.0.11

Open the chart page →

9,257
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/docker/docker@v20.10.24+incompatible
23.0.11

Open the chart page →

10,315
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
23.0.11

Open the chart page →

6,085
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/docker/docker@v20.10.14+incompatible
23.0.11

Open the chart page →

4,039
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/docker/docker@v20.10.21+incompatible
23.0.11

Open the chart page →

17,877
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
github.com/docker/docker@v20.10.24+incompatible
23.0.11

Open the chart page →

14,917
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
prom/prometheus:v2.37.98176adea328e
github.com/docker/docker@v20.10.24+incompatible
23.0.11

Open the chart page →

22,202
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
github.com/docker/docker@v20.10.17+incompatible
23.0.11

Open the chart page →

5,299
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/docker/docker@v1.13.1
23.0.11

Open the chart page →

10,730
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
23.0.11
hyperledger/fabric-tools:2.4b1194f509085
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
23.0.11

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
23.0.11
hyperledger/fabric-tools:2.4b1194f509085
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
23.0.11

Open the chart page →

77,687
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/docker/docker@v20.10.24+incompatible
23.0.11

Open the chart page →

2,898
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
23.0.11

Open the chart page →

7,830
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220201 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 9 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
23.0.11

Open the chart page →

4,256
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
23.0.11

Open the chart page →

7,303
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
23.0.11

Open the chart page →

4,568
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/docker/docker@v20.10.14+incompatible
23.0.11

Open the chart page →

2,969
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/docker/docker@v23.0.0-rc.1+incompatible
23.0.11

Open the chart page →

5,598
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/docker@v20.10.7+incompatible
23.0.11

Open the chart page →

6,237
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
23.0.11

Open the chart page →

7,779
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
23.0.11

Open the chart page →

10,454
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2024-29018.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/docker@v20.10.3-0.20211206061157-934f955e3d62+incompatible
23.0.11

Open the chart page →

18,376

Container images carrying it

262 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/docker/docker@v20.10.24+incompatible
23.0.11
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
github.com/docker/docker@v20.10.24+incompatible
23.0.11
1
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/docker/docker@v20.10.12+incompatible
23.0.11
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
23.0.11
1
quay.io/operator-framework/olmf9ea8cef95ac
github.com/docker/docker@v20.10.21+incompatible
23.0.11
1
quay.io/prometheus/prometheus:v2.39.14748e26f9369
github.com/docker/docker@v20.10.18+incompatible
23.0.11
1
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/docker/docker@v20.10.17+incompatible
23.0.11
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/docker/docker@v20.10.12+incompatible
23.0.11
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/docker/docker@v20.10.12+incompatible
23.0.11
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/docker/docker@v23.0.5+incompatible
23.0.11
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/docker/docker@v20.10.3+incompatible
23.0.11
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/docker/docker@v17.12.1-ce+incompatible
23.0.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.