CVE-2019-5021

🗓️ 08 May 2019 16:52:23Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 164 Views

Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user

Reporter	Title	Published	Views	Family All 32
Gitee	Exploit for Race Condition in Canonical Ubuntu_Linux	2 Dec 202115:59	–	gitee
Tenable Nessus	Unpassworded 'root' Account	20 Feb 200300:00	–	nessus
Tenable Nessus	openSUSE Security Update : system-user-root (openSUSE-2019-1495)	5 Jun 201900:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : sles12sp2-docker-image (SUSE-SU-2021:4011-1)	14 Dec 202100:00	–	nessus
ATTACKERKB	CVE-2019-5021	8 May 201900:00	–	attackerkb
Circl	CVE-2019-5021	15 May 201912:52	–	circl
Cvelist	CVE-2019-5021	8 May 201916:52	–	cvelist
EUVD	EUVD-2019-14628	7 Oct 202500:30	–	euvd
F5 Networks	K25551452: Alpine Linux Docker image vulnerability CVE-2019-5021	21 Feb 202318:55	–	f5
NVD	CVE-2019-5021	8 May 201917:29	–	nvd

NVD

Node

gliderlabs docker-alpineRange3.3≥

AND

alpinelinux alpine_linuxMatch-

Node

opensuse leapMatch15.0

opensuse leapMatch15.1

Node

f5 big-ip_controllerMatch1.2.1cloud_foundry

[
  {
    "product": "Alpine Linux",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Alpine Docker 3.3 Alpine Docker 3.4 Alpine Docker 3.5 Alpine Docker 3.6 Alpine Docker 3.7 Alpine Docker 3.8 Alpine Docker 3.9 Alpine Docker Edge"
      }
    ]
  }
]

Source	Link
alpinelinux	www.alpinelinux.org/posts/Docker-image-vulnerability-CVE-2019-5021.html
support	www.support.f5.com/csp/article/K25551452
security	www.security.netapp.com/advisory/ntap-20190510-0001/
lists	www.lists.opensuse.org/opensuse-security-announce/2019-06/msg00004.html
securityfocus	www.securityfocus.com/bid/108288
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2019-0782

21 Nov 2024 04:44Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.03031

CWE-258