📦

moby

Vendor: mobyproject

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 42 Total Indexed
Avg. EPSS 0.59% Exploit Prob.
Latest CVE CVE-2026-34040 Mar 31

Security Vulnerability Index

Page 3 / 5
5.9 CVSS
CVE-2017-16539

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain older Linux kernels are used) by leveraging Docker container access to write a "scsi remove-single-device" line to /proc/scsi/scsi, aka SCSI MICDROP.

EPSS: 0.44%