Lucene search
UbuntuUSN-5103-1HistoryOct 04, 2021 - 12:00 a.m.
docker.io vulnerability
2021-10-0400:00:00
ubuntu.com
93
Releases
- Ubuntu 21.04
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- docker.io - Linux container runtime
Details
Lei Wang and Ruizhi Xiao discovered that the Moby Docker engine in
Docker incorrectly allowed the docker cp command to make permissions
changes in the host filesystem in some situations. A local attacker
could possibly use to this to expose sensitive information or gain
administrative privileges.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 21.04 | noarch | docker.io | < 20.10.7-0ubuntu1~21.04.2 | UNKNOWN |
| Ubuntu | 21.04 | noarch | docker-doc | < 20.10.7-0ubuntu1~21.04.2 | UNKNOWN |
| Ubuntu | 21.04 | noarch | golang-docker-dev | < 20.10.7-0ubuntu1~21.04.2 | UNKNOWN |
| Ubuntu | 21.04 | noarch | golang-github-docker-docker-dev | < 20.10.7-0ubuntu1~21.04.2 | UNKNOWN |
| Ubuntu | 21.04 | noarch | vim-syntax-docker | < 20.10.7-0ubuntu1~21.04.2 | UNKNOWN |
| Ubuntu | 20.04 | noarch | docker.io | < 20.10.7-0ubuntu1~20.04.2 | UNKNOWN |
| Ubuntu | 20.04 | noarch | docker-doc | < 20.10.7-0ubuntu1~20.04.2 | UNKNOWN |
| Ubuntu | 20.04 | noarch | golang-docker-dev | < 20.10.7-0ubuntu1~20.04.2 | UNKNOWN |
| Ubuntu | 20.04 | noarch | golang-github-docker-docker-dev | < 20.10.7-0ubuntu1~20.04.2 | UNKNOWN |
| Ubuntu | 20.04 | noarch | vim-syntax-docker | < 20.10.7-0ubuntu1~20.04.2 | UNKNOWN |
References
Related
nessus
nessus
Photon OS 4.0: Docker PHSA-2021-4.0-0113
2021-10-10 00:00:00
Photon OS 2.0: Docker PHSA-2021-2.0-0402
2021-10-11 00:00:00
osv
osv
CVE-2021-41089
2021-10-04 21:15:12
docker.io vulnerability
2021-10-04 22:48:39
cvelist
cvelist
CVE-2021-41089 `docker cp` allows unexpected chmod of host files
2021-10-04 20:20:15
alpinelinux
alpinelinux
CVE-2021-41089
2021-10-04 21:15:00
prion
prion
Design/Logic Flaw
2021-10-04 21:15:00
veracode
veracode
Privilege Escalation
2021-10-05 07:07:51
ubuntucve
ubuntucve
CVE-2021-41089
2021-10-04 00:00:00
redhatcve
redhatcve
CVE-2021-41089
2021-10-04 20:23:57
debiancve
debiancve
CVE-2021-41089
2021-10-04 21:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-5103-1)
2021-10-05 00:00:00
Huawei EulerOS: Security Advisory for docker (EulerOS-SA-2022-2265)
2022-08-18 00:00:00
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2022-2311)
2022-09-14 00:00:00
cve
cve
CVE-2021-41089
2021-10-04 21:15:00
photon
photon
mageia
mageia
Updated docker packages fix security vulnerabilities
2021-10-31 14:12:48
amazon
amazon
Medium: docker
2021-09-30 19:22:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Docker affect IBM InfoSphere Information Server
2022-10-14 21:28:51
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 18:56:36
fedora
fedora
[SECURITY] Fedora 35 Update: moby-engine-20.10.9-1.fc35
2021-10-29 23:24:02
[SECURITY] Fedora 35 Update: containerd-1.5.7-1.fc35
2021-10-29 23:24:01
[SECURITY] Fedora 34 Update: containerd-1.5.7-1.fc34
2021-10-19 00:37:23
suse
suse
Security update for containerd, docker (moderate)
2022-02-04 00:00:00
Security update for containerd, docker, runc (important)
2021-10-31 00:00:00
Security update for containerd, docker, runc (important)
2021-10-25 00:00:00
ics
ics
Siemens SCALANCE LPE9403 Third-Party Vulnerabilities
2022-06-16 12:00:00
redhat
redhat