Moby Patches DNS Resolution Vulnerability in Docker Engine

CVE-2024-29018

Summary

A vulnerability in the Moby container framework allows DNS requests originating from internal networks to be inadvertently forwarded to external nameservers. This design flaw arises from how dockerd handles name resolution for containers that are solely on internal networks. As internal networks are typically isolated from external communication, containers lack access to upstream resolvers, which can lead to unintended DNS leaks. Attackers can exploit this behavior by manipulating DNS queries to exfiltrate sensitive information, using compromised containers to encode data within these queries. Updated versions of Moby have been released to mitigate this issue, emphasizing the importance of patching and configuring containers securely.

References