CVE-2024-32473 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-32473 Interim 1 7 2025-07-12T08:17:23Z current 2024-12-06T00:44:52Z 2025-07-12T08:17:23Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-32473 Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. In 26.0.0, IPv6 is not disabled on network interfaces, including those belonging to networks where `--ipv6=false`. An container with an `ipvlan` or `macvlan` interface will normally be configured to share an external network link with the host machine. Because of this direct access, (1) Containers may be able to communicate with other hosts on the local network over link-local IPv6 addresses, (2) if router advertisements are being broadcast over the local network, containers may get SLAAC-assigned addresses, and (3) the interface will be a member of IPv6 multicast groups. This means interfaces in IPv4-only networks present an unexpectedly and unnecessarily increased attack surface. The issue is patched in 26.0.2. To completely disable IPv6 in a container, use `--sysctl=net.ipv6.conf.all.disable_ipv6=1` in the `docker create` or `docker run` command. Or, in the service configuration of a `compose` file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Micro 6.0 openSUSE Leap 15.5 openSUSE Leap 15.6 docker docker-bash-completion docker-buildx docker-fish-completion docker-rootless-extras docker-test docker-zsh-completion docker as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS docker-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS docker-buildx as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS docker as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS docker-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS docker-buildx as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS docker-fish-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS docker as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS docker-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS docker-buildx as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS docker-rootless-extras as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS docker as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS docker-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS docker-buildx as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS docker-rootless-extras as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS docker as a component of SUSE Linux Enterprise Micro 5.1 docker-buildx as a component of SUSE Linux Enterprise Micro 5.1 docker as a component of SUSE Linux Enterprise Micro 5.2 docker-buildx as a component of SUSE Linux Enterprise Micro 5.2 docker as a component of SUSE Linux Enterprise Micro 5.3 docker-buildx as a component of SUSE Linux Enterprise Micro 5.3 docker as a component of SUSE Linux Enterprise Micro 5.4 docker-buildx as a component of SUSE Linux Enterprise Micro 5.4 docker as a component of SUSE Linux Enterprise Micro 5.5 docker-buildx as a component of SUSE Linux Enterprise Micro 5.5 docker as a component of SUSE Linux Enterprise Module for Containers 15 SP5 docker-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP5 docker-buildx as a component of SUSE Linux Enterprise Module for Containers 15 SP5 docker-rootless-extras as a component of SUSE Linux Enterprise Module for Containers 15 SP5 docker as a component of SUSE Linux Enterprise Module for Containers 15 SP6 docker-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP6 docker-buildx as a component of SUSE Linux Enterprise Module for Containers 15 SP6 docker-rootless-extras as a component of SUSE Linux Enterprise Module for Containers 15 SP6 docker-zsh-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP6 docker as a component of SUSE Linux Enterprise Server 12 SP5-LTSS docker-bash-completion as a component of SUSE Linux Enterprise Server 12 SP5-LTSS docker-buildx as a component of SUSE Linux Enterprise Server 12 SP5-LTSS docker as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security docker as a component of SUSE Linux Enterprise Server 15 SP1-LTSS docker-bash-completion as a component of SUSE Linux Enterprise Server 15 SP1-LTSS docker as a component of SUSE Linux Enterprise Server 15 SP2-LTSS docker-bash-completion as a component of SUSE Linux Enterprise Server 15 SP2-LTSS docker-buildx as a component of SUSE Linux Enterprise Server 15 SP2-LTSS docker as a component of SUSE Linux Enterprise Server 15 SP3-LTSS docker-bash-completion as a component of SUSE Linux Enterprise Server 15 SP3-LTSS docker-buildx as a component of SUSE Linux Enterprise Server 15 SP3-LTSS docker-fish-completion as a component of SUSE Linux Enterprise Server 15 SP3-LTSS docker as a component of SUSE Linux Enterprise Server 15 SP4-LTSS docker-bash-completion as a component of SUSE Linux Enterprise Server 15 SP4-LTSS docker-buildx as a component of SUSE Linux Enterprise Server 15 SP4-LTSS docker-rootless-extras as a component of SUSE Linux Enterprise Server 15 SP4-LTSS docker as a component of SUSE Linux Enterprise Server 15-LTSS docker-bash-completion as a component of SUSE Linux Enterprise Server 15-LTSS docker as a component of SUSE Linux Enterprise Server Teradata 15 SP4 docker as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 docker-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 docker-buildx as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 docker as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 docker-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 docker-buildx as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 docker-fish-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 docker as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 docker-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 docker-buildx as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 docker-rootless-extras as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 docker as a component of SUSE Linux Micro 6.0 docker-buildx as a component of SUSE Linux Micro 6.0 docker as a component of openSUSE Leap 15.5 docker-bash-completion as a component of openSUSE Leap 15.5 docker-buildx as a component of openSUSE Leap 15.5 docker-fish-completion as a component of openSUSE Leap 15.5 docker-rootless-extras as a component of openSUSE Leap 15.5 docker-test as a component of openSUSE Leap 15.5 docker-zsh-completion as a component of openSUSE Leap 15.5 docker as a component of openSUSE Leap 15.6 docker-bash-completion as a component of openSUSE Leap 15.6 docker-buildx as a component of openSUSE Leap 15.6 docker-fish-completion as a component of openSUSE Leap 15.6 docker-rootless-extras as a component of openSUSE Leap 15.6 docker-test as a component of openSUSE Leap 15.6 docker-zsh-completion as a component of openSUSE Leap 15.6 Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. In 26.0.0, IPv6 is not disabled on network interfaces, including those belonging to networks where `--ipv6=false`. An container with an `ipvlan` or `macvlan` interface will normally be configured to share an external network link with the host machine. Because of this direct access, (1) Containers may be able to communicate with other hosts on the local network over link-local IPv6 addresses, (2) if router advertisements are being broadcast over the local network, containers may get SLAAC-assigned addresses, and (3) the interface will be a member of IPv6 multicast groups. This means interfaces in IPv4-only networks present an unexpectedly and unnecessarily increased attack surface. The issue is patched in 26.0.2. To completely disable IPv6 in a container, use `--sysctl=net.ipv6.conf.all.disable_ipv6=1` in the `docker create` or `docker run` command. Or, in the service configuration of a `compose` file. CVE-2024-32473 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-buildx SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-buildx SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-buildx SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-buildx SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras SUSE Linux Enterprise Micro 5.1:docker SUSE Linux Enterprise Micro 5.1:docker-buildx SUSE Linux Enterprise Micro 5.2:docker SUSE Linux Enterprise Micro 5.2:docker-buildx SUSE Linux Enterprise Micro 5.3:docker SUSE Linux Enterprise Micro 5.3:docker-buildx SUSE Linux Enterprise Micro 5.4:docker SUSE Linux Enterprise Micro 5.4:docker-buildx SUSE Linux Enterprise Micro 5.5:docker SUSE Linux Enterprise Micro 5.5:docker-buildx SUSE Linux Enterprise Module for Containers 15 SP5:docker SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion SUSE Linux Enterprise Module for Containers 15 SP5:docker-buildx SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras SUSE Linux Enterprise Module for Containers 15 SP6:docker SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion SUSE Linux Enterprise Module for Containers 15 SP6:docker-buildx SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras SUSE Linux Enterprise Module for Containers 15 SP6:docker-zsh-completion SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:docker SUSE Linux Enterprise Server 12 SP5-LTSS:docker SUSE Linux Enterprise Server 12 SP5-LTSS:docker-bash-completion SUSE Linux Enterprise Server 12 SP5-LTSS:docker-buildx SUSE Linux Enterprise Server 15 SP1-LTSS:docker SUSE Linux Enterprise Server 15 SP1-LTSS:docker-bash-completion SUSE Linux Enterprise Server 15 SP2-LTSS:docker SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion SUSE Linux Enterprise Server 15 SP2-LTSS:docker-buildx SUSE Linux Enterprise Server 15 SP3-LTSS:docker SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion SUSE Linux Enterprise Server 15 SP3-LTSS:docker-buildx SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion SUSE Linux Enterprise Server 15 SP4-LTSS:docker SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion SUSE Linux Enterprise Server 15 SP4-LTSS:docker-buildx SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras SUSE Linux Enterprise Server 15-LTSS:docker SUSE Linux Enterprise Server 15-LTSS:docker-bash-completion SUSE Linux Enterprise Server Teradata 15 SP4:docker SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-buildx SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-buildx SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-buildx SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras SUSE Linux Micro 6.0:docker SUSE Linux Micro 6.0:docker-buildx openSUSE Leap 15.5:docker openSUSE Leap 15.5:docker-bash-completion openSUSE Leap 15.5:docker-buildx openSUSE Leap 15.5:docker-fish-completion openSUSE Leap 15.5:docker-rootless-extras openSUSE Leap 15.5:docker-test openSUSE Leap 15.5:docker-zsh-completion openSUSE Leap 15.6:docker openSUSE Leap 15.6:docker-bash-completion openSUSE Leap 15.6:docker-buildx openSUSE Leap 15.6:docker-fish-completion openSUSE Leap 15.6:docker-rootless-extras openSUSE Leap 15.6:docker-test openSUSE Leap 15.6:docker-zsh-completion moderate 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N