Summary
Jasiel Spelman discovered that a double free existed in the docker-credential-
helpers dependency of Docker. A local attacker could use this to cause a denial of service
(crash) or possibly execute arbitrary code.
Original advisory details:
Jasiel Spelman discovered that a double free existed in docker-credential-
helpers. A local attacker could use this to cause a denial of service
(crash) or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | docker.io | 18.09.7-0ubuntu1~16.04.5 |
| Ubuntu · 18.04 LTS 18.04:LTS | docker.io | 18.09.7-0ubuntu1~18.04.4 |
Vulnerabilities 1
-
Unscored —
docker-credential-helpers before 0.6.3 has a double free in the List functions.
References
-
report
https://ubuntu.com/security/CVE-2019-1020014