Summary
Aleksa Sarai discovered that Docker was vulnerable to a directory traversal
attack. An attacker could use this vulnerability to read and write arbitrary
files on the host filesystem as root.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | docker.io | 18.09.7-0ubuntu1~16.04.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | docker.io | 18.09.7-0ubuntu1~18.04.3 |
Vulnerabilities 2
-
Unscored —
In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange…
-
Unscored —
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc …