Skip to content
OpenAdvisories
Critical DSA-4521-1 3 CVEs

docker.io - security update

Published Sep 9, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 docker.io 18.09.1+dfsg1-7.1+deb10u1

Vulnerabilities 3

  • Critical 9.8
    CVE-2019-14271 Public exploit EPSS 19%

    Moby Docker cp broken with debian containers

    In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

    docker.io docker github.com/docker/docker github.com/moby/moby Debian Alpine Go
  • High 7.5
    CVE-2019-13509

    Secret insertion into debug log in Docker

    In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a sta…

    docker.io docker github.com/docker/docker Debian Alpine Go
  • Unscored —
    CVE-2019-13139 Public exploit

    In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "docker build"…

    docker.io Debian