CVE-2019-13139 affecting package moby-buildx 0.4.1-3

CVE-2019-13139 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2019-13139

creationtimestamp| type| source ---|---|--- 2020-12-22 08:12:31+00:00| published-proof-of-concept| https://t.me/k8security/171 2024-10-14 22:35:35+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/540...

Amazon Linux AMI : docker (ALAS-2019-1316)

A command injection flaw was discovered in Docker during the docker build command. By providing a specially crafted path argument for the container to build, it is possible to inject command options to the git fetch/git checkout commands that are executed by Docker and to execute code with the...

CVE-2019-13139

In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "docker build" command would be able to gain command execution. An issue exists in the way "docker build" processes remote git URLs, and results in command injection into the underlying "git...

CVE-2019-13139

Docker Engine prior to 18.09.4 is vulnerable: an attacker who can influence the build path for docker build can inject command options into git clone, enabling code execution as the invoking user. Root cause: remote git URL handling allows git ref to be misinterpreted as a flag. Impact: potential...