CVE-2023-28841

CVE-2023-28841 affects Moby, including Docker and Mirantis Container Runtime, specifically within Swarm Mode's encrypted overlay networks. The vulnerability causes encrypted overlay networks to silently transmit unencrypted data, negating confidentiality and data integrity guarantees. This medium-severity flaw (CVSS 6.8) allows an attacker in a trusted network position to intercept sensitive application traffic, leading to data disclosure. There is no evidence of active exploitation, public exploit code, or significant community discussion, and patches are available in Moby releases 23.0.3, 20.10.24, and Mirantis Container Runtime 20.10.16.