CVE-2024-36623: Race Condition
Last updated 7 May 2025
Other sources
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
— MITRE
moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.
— GitHub
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36623?
CVE-2024-36623 is a medium-severity vulnerability due to a race condition that can lead to data corruption or application crashes.
How do I fix CVE-2024-36623?
To resolve CVE-2024-36623, upgrade to version 26.0.0 or later of the affected software.
What is the nature of the vulnerability in CVE-2024-36623?
CVE-2024-36623 involves a race condition in the streamformatter package that allows multiple concurrent write operations.
Which versions of moby are impacted by CVE-2024-36623?
Versions of moby prior to 26.0.0 are impacted by CVE-2024-36623.
Can CVE-2024-36623 be exploited remotely?
CVE-2024-36623 is typically an internal application vulnerability, so direct remote exploitation is unlikely.