docker.io vulnerabilities (Debian)
54 vulnerabilities.
-
docker.ioDebian Blind VXLAN injection into encrypted overlay networks from cluster peer 6.9 Medium -
docker.ioDebian Docker Engine insecure-registry fallback via malicious DNS responses 7.6 High -
docker.ioDebian Moby: Race condition in docker cp allows bind mount redirection to host path 7.2 High -
docker.ioDebian Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap 6.1 Medium -
docker.ioDebian Docker: `PUT /containers/{id}/archive` executes container binary on the host 7.2 High -
docker.ioDebian Moby: AuthZ plugin bypass with oversized request body 8.8 High -
docker.ioDebian Moby: Off-by-one error in plugin privilege validation 6.8 Medium -
docker.ioDebian BuildKit Git URL subdir component can cause access to restricted files 8.2 High -
docker.ioDebian BuildKit vulnerable to malicious frontend causing file escape outside of storage root 8.4 High -
docker.ioDebian Moby's Firewalld reload removes bridge network isolation 3.3 Low -
docker.ioDebian Moby Race Condition vulnerability 8.1 High -
docker.ioDebian Moby Race Condition vulnerability 6.5 Medium -
docker.ioDebian Moby authz zero length regression 10.0 Critical -
docker.ioDebian Moby IPv6 enabled on IPv4-only network interfaces 4.7 Medium -
docker.ioDebian External DNS requests from 'internal' networks could lead to data exfiltration 5.9 Medium -
docker.ioDebian Moby classic builder cache poisoning 6.9 Medium -
docker.ioDebian moby/moby's dockerd daemon encrypted overlay network may be unauthenticated 7.5 High -
docker.ioDebian moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted 6.8 Medium -
docker.ioDebian moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated 6.8 Medium -
docker.ioDebian Moby vulnerability relating to supplementary group permissions 5.3 Medium -
docker.ioDebian Insufficiently restricted permissions on data directory in Docker Engine 6.3 Medium -
docker.ioDebian Docker CLI leaks private registry credentials to registry-1.docker.io 5.4 Medium -
docker.ioDebian `docker cp` allows unexpected chmod of host files 2.8 Low -
docker.ioDebian privilege escalation in Moby 6.8 Medium -
docker.ioDebian Docker daemon crash during image pull of malicious image 6.5 Medium -
docker.ioDebian containerd-shim API Exposed to Host Network Containers 5.2 Medium -
docker.ioDebian containerd can be coerced into leaking credentials during image pull 6.1 Medium -
docker.ioDebian Improper Input Validation in Docker Engine 6.0 Medium -
docker.ioDebian A vulnerability exists in Docker before 1.2 via container names, which may collide with and... 5.3 Medium -
docker.ioDebian An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via... 9.8 Critical -
docker.ioDebian Path Traversal in Docker 8.6 High -
docker.ioDebian In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path... 8.4 High -
docker.ioDebian Moby Docker cp broken with debian containers 9.8 Critical -
docker.ioDebian Secret insertion into debug log in Docker 7.5 High -
docker.ioDebian In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable... 7.5 High -
docker.ioDebian Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory... 4.9 Medium -
docker.ioDebian Docker Authentication Bypass 7.5 High -
docker.ioDebian The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does... 6.3 Medium -
docker.ioDebian Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect... 8.1 High -
docker.ioDebian Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP) 5.9 Medium -
docker.ioDebian tar-split memory exhaustion 6.5 Medium -
docker.ioDebian Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp... 7.8 High -
docker.ioDebian Information Exposure in RunC 6.4 Medium -
docker.ioDebian Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and... 7.5 High -
docker.ioDebian Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique... 5.5 Medium -
docker.ioDebian Arbitrary File Override in Docker Engine 3.6 Low -
docker.ioDebian Information Exposure in Docker Engine 7.2 High -
docker.ioDebian Arbitrary File Write in Libcontainer 7.8 High -
docker.ioDebian Symlink Attack in Libcontainer and Docker Engine 7.2 High -
docker.ioDebian Directory Traversal in Docker 6.4 Medium - Show olderLoading…