CVE-2023-28840

CVE-2023-28840 impacts Moby, including Docker and Mirantis Container Runtime, specifically within the Swarm Mode's encrypted overlay network feature. The vulnerability arises from improperly prioritized iptables rules that fail to discard unencrypted VXLAN datagrams, allowing them to bypass intended security controls. This flaw carries a CVSS score of 8.7 (HIGH), indicating a network-based attack with high impact on integrity and availability, despite high attack complexity. While there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, patches are available in Moby releases 23.0.3, 20.10.24, and Mirantis Container Runtime 20.10.16.