PT-2024-36807 · Fort · Fort

Name of the Vulnerable Software and Affected Versions: Fort versions 1.6.3 through 1.6.4 Description: An integer underflow was discovered in Fort, allowing a malicious RPKI repository that descends from a trusted Trust Anchor to serve a Manifest RPKI object containing an empty fileList. This caus...

CVE-2014-8179: Improper Input Validation

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation...

PT-2019-7142

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 1.8.3 CS Docker Engine versions prior to 1.6.2-CS7 Description The issue arises from improper validation and extraction of the manifest object from its JSON representation during a pull. This allows attackers to...