https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 07:28:10 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-115538 <p>Moby&#39;s overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN datagrams to bypass IPsec encryption and remove the protection against incoming cleartext VXLAN traffic. The condition is not logged by dockerd and persists until the encrypted network&#39;s last local endpoint is removed and another is added, or dockerd is restarted. Each further firewalld event repeats the condition.</p> <p>Moby&#39;s overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN datagrams to bypass IPsec encryption and remove the protection against incoming cleartext VXLAN traffic. The condition is not logged by dockerd and persists until the encrypted network&#39;s last local endpoint is removed and another is added, or dockerd is restarted. Each further firewalld event repeats the condition.</p> https://db.gcve.eu/vuln/fkie_cve-2026-115538 https://db.gcve.eu/vuln/msrc_cve-2026-115538 msrc_CVE-2026-115538 https://db.gcve.eu/vuln/msrc_cve-2026-115538 https://db.gcve.eu/vuln/ubuntu-cve-2026-115538 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: docker.io, Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:Pro:22.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io, Ubuntu:Pro:24.04:LTS: docker.io-app, Ubuntu:26.10: docker.io, Ubuntu:26.10: docker.io-app and 2 more</p> <p>Moby&#39;s overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN datagrams to bypass IPsec encryption and remove the protection against incoming cleartext VXLAN traffic. The condition is not logged by dockerd and persists until the encrypted network&#39;s last local endpoint is removed and another is added, or dockerd is restarted. Each further firewalld event repeats the condition.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: docker.io, Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:Pro:22.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io, Ubuntu:Pro:24.04:LTS: docker.io-app, Ubuntu:26.10: docker.io, Ubuntu:26.10: docker.io-app and 2 more</p> <p>Moby&#39;s overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN datagrams to bypass IPsec encryption and remove the protection against incoming cleartext VXLAN traffic. The condition is not logged by dockerd and persists until the encrypted network&#39;s last local endpoint is removed and another is added, or dockerd is restarted. Each further firewalld event repeats the condition.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-115538