Summary
Jasiel Spelman discovered that docker-credential-helpers has a double free. A
local attacker could use this to cause a denial of service (crash) or possibly
execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | golang-github-docker-docker-credential-helpers | 0.5.0-2ubuntu0.1+esm1 |
Vulnerabilities 1
-
Unscored —
docker-credential-helpers before 0.6.3 has a double free in the List functions.
References
-
report
https://ubuntu.com/security/CVE-2019-1020014