The vulnerability of the dockerd daemon, a deployment and application management automation tool in Docker-enabled environments, relates to a resource consumption control mechanism error. This vulnerability allows attackers to trigger service failures.

Docker daemon has resource control error and image manifest handling issues causing service failures.

Reporter	Title	Published	Views	Family All 133
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Docker affects IBM InfoSphere Information Server	1 Apr 202121:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Docker affect IBM Cloud Pak System	19 Jul 202112:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Automation Manager Content Runtime is affected by an issue with Docker before 19.03.15.	22 Apr 202114:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Docker vulnerabilities (CVE-2021-21285, CVE-2021-21284)	3 Sep 202112:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by vulnerabilities in Docker (CVE-2021-21285, CVE-2021-21284)	9 Mar 202113:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in MongoDB, Node.js, Docker, and XStream affect IBM Spectrum Protect Plus	28 Jun 202120:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Managed Service Content Runtime is affected by an issue with Docker before 19.03.15.	22 Apr 202114:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Python, Docker, and ICP affect IBM Spectrum Discover	13 May 202116:56	–	ibm

Vulners

Node

docker dockerRange<19.03.15

docker dockerRange20.0.0–20.10.3

Source	Link
docs	www.docs.docker.com/engine/release-notes/
github	www.github.com/moby/moby/commit/8d3179546e79065adefa67cc697c09d0ab137d30
github	www.github.com/moby/moby/security/advisories/GHSA-6fj5-m822-rqx8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21285
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-21285
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47
web	www.web.nvd.nist.gov/view/vuln/detail

27 Apr 2024 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 36.5

EPSS0.00351