Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4048-1
HistoryJul 08, 2019 - 12:00 a.m.

Docker vulnerabilities

2019-07-0800:00:00
ubuntu.com
175

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.6%

JSON

Releases

  • Ubuntu 19.04
  • Ubuntu 18.10
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

Details

Aleksa Sarai discovered that Docker was vulnerable to a directory traversal
attack. An attacker could use this vulnerability to read and write arbitrary
files on the host filesystem as root.

OSVersionArchitecturePackageVersionFilename
Ubuntu19.04noarchdocker.io< 18.09.7-0ubuntu1~19.04.4UNKNOWN
Ubuntu19.04noarchdocker-doc< 18.09.7-0ubuntu1~19.04.4UNKNOWN
Ubuntu19.04noarchgolang-docker-dev< 18.09.7-0ubuntu1~19.04.4UNKNOWN
Ubuntu19.04noarchgolang-github-docker-docker-dev< 18.09.7-0ubuntu1~19.04.4UNKNOWN
Ubuntu19.04noarchvim-syntax-docker< 18.09.7-0ubuntu1~19.04.4UNKNOWN
Ubuntu18.10noarchdocker.io< 18.09.7-0ubuntu1~18.10.3UNKNOWN
Ubuntu18.10noarchdocker-doc< 18.09.7-0ubuntu1~18.10.3UNKNOWN
Ubuntu18.10noarchgolang-docker-dev< 18.09.7-0ubuntu1~18.10.3UNKNOWN
Ubuntu18.10noarchgolang-github-docker-docker-dev< 18.09.7-0ubuntu1~18.10.3UNKNOWN
Ubuntu18.10noarchvim-syntax-docker< 18.09.7-0ubuntu1~18.10.3UNKNOWN
Rows per page:
1-10 of 201

Related

nessus 43
openvas 22
oraclelinux 8
ibm 8
alpinelinux 2
redhat 6
redhatcve 3
cve 4
amazon 2
suse 7
debiancve 3
pentestit 1
veracode 3
myhack58 1
osv 6
prion 4
mscve 1
ubuntucve 4
hackerone 3
impervablog 1
fedora 16
zdt 3
githubexploit 11
photon 3
threatpost 4
vmware 2
f5 1
exploitpack 1
virtuozzo 1
mageia 2
trendmicroblog 2
thn 2
qualysblog 1
archlinux 2
altlinux 2
almalinux 1
cbl_mariner 1
kitploit 3
checkpoint_advisories 1
cisco 1
cloudfoundry 1
rocky 1
exploitdb 1
kaspersky 1
packetstorm 1
metasploit 1
rapid7blog 1
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : Docker vulnerabilities (USN-4048-1)
2019-07-09 00:00:00
openSUSE Security Update : docker (openSUSE-2019-1621)
2019-06-25 00:00:00
SUSE SLED15 / SLES15 Security Update : docker (SUSE-SU-2019:1562-1)
2019-06-19 00:00:00
openvas
openvas
Ubuntu Update for docker.io USN-4048-1
2019-07-09 00:00:00
openSUSE: Security Advisory for docker (openSUSE-SU-2019:1621-1)
2019-06-26 00:00:00
Fedora Update for moby-engine FEDORA-2019-352d4b9cd8
2019-05-07 00:00:00
oraclelinux
oraclelinux
docker-engine security update
2019-08-19 00:00:00
docker-engine security update
2019-06-13 00:00:00
runc bug fix update
2021-04-28 00:00:00
ibm
ibm
Security Bulletin: A Security Vulnerability affects IBM Cloud Private - Docker (CVE-2018-15664)
2019-08-16 23:05:55
Security Bulletin: IBM Cloud Automation Manager is affected by an issue with API endpoints behind the 'docker cp'
2019-07-26 20:01:51
Security Bulletin: IBM Cloud Private for Data is affected by an issue with runc used by Docker
2019-10-03 22:50:40
alpinelinux
alpinelinux
CVE-2018-15664
2019-05-23 14:29:00
CVE-2019-5736
2019-02-11 19:29:00
redhat
redhat
(RHSA-2019:1910) Moderate: docker security and bug fix update
2019-07-29 15:59:50
(RHSA-2019:0304) Important: docker security update
2019-02-11 14:26:20
(RHSA-2019:0303) Important: runc security update
2019-02-11 14:24:53
redhatcve
redhatcve
CVE-2018-15664
2019-05-28 17:50:14
CVE-2019-5736
2020-01-11 09:33:43
CVE-2020-14298
2020-06-23 19:26:46
cve
cve
CVE-2018-15664
2019-05-23 14:29:00
CVE-2019-5736
2019-02-11 19:29:00
CVE-2020-14298
2020-07-13 21:15:00
amazon
amazon
Medium: docker
2019-07-17 23:53:00
Important: docker
2019-02-08 22:28:00
suse
suse
Security update for docker (moderate)
2019-06-25 00:00:00
Security update for lxc (moderate)
2019-10-03 00:00:00
Security update for docker-runc (important)
2019-02-27 00:00:00
debiancve
debiancve
CVE-2018-15664
2019-05-23 14:29:00
CVE-2019-5736
2019-02-11 19:29:00
CVE-2020-14298
2020-07-13 21:15:00
pentestit
pentestit
UPDATE: Sysdig Falco v0.15.1
2019-06-10 23:15:46
veracode
veracode
Directory Traversal
2019-05-24 11:10:46
Malicious Container Execution
2019-02-12 02:31:29
Remote Code Execution
2020-06-24 03:08:12
myhack58
myhack58
Not to fix the vulnerabilities will affect all Docker versions-vulnerability warning-the black bar safety net
2019-05-31 00:00:00
osv
osv
CVE-2018-15664
2019-05-23 14:29:07
Important: container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
CVE-2019-5736
2019-02-11 19:29:00
prion
prion
Directory traversal
2019-05-23 14:29:00
Design/Logic Flaw
2019-02-11 19:29:00
Design/Logic Flaw
2020-07-13 21:15:00
mscve
mscve
Docker Elevation of Privilege Vulnerability
2019-07-09 07:00:00
ubuntucve
ubuntucve
CVE-2018-15664
2019-05-23 00:00:00
CVE-2019-5736
2019-02-11 00:00:00
CVE-2019-12499
2019-05-31 00:00:00
hackerone
hackerone
Internet Bug Bounty: CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host
2019-02-13 18:50:11
50m-ctf: CTF write-up: c8889970d9fb722066f31e804e351993
2019-03-03 10:08:22
50m-ctf: $50 million CTF Writeup
2019-03-25 02:28:13
impervablog
impervablog
Hundreds of Vulnerable Docker Hosts Exploited by Cryptocurrency Miners
2019-03-04 21:00:39
fedora
fedora
[SECURITY] Fedora 29 Update: python3-lxc-3.0.4-1.fc29
2019-09-06 12:59:40
[SECURITY] Fedora 30 Update: lxcfs-3.0.4-1.fc30
2019-09-06 12:35:28
[SECURITY] Fedora 29 Update: moby-engine-18.06.0-2.ce.git0ffa825.fc29
2019-02-19 14:04:24
zdt
zdt
runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (2)
2019-02-15 00:00:00
runC < 1.0-rc6 (Docker < 18.09.2) - Host Command Execution Exploit
2019-02-12 00:00:00
Docker Container Escape Exploit
2021-07-01 00:00:00
githubexploit
githubexploit
Exploit for OS Command Injection in Docker
2019-06-30 13:42:14
Exploit for OS Command Injection in Docker
2021-07-08 22:46:30
Exploit for OS Command Injection in Docker
2019-12-12 16:57:13
photon
photon
Important Photon OS Security Update - PHSA-2019-0001
2019-02-12 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0208
2019-02-12 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0129
2019-02-13 00:00:00
threatpost
threatpost
Public Clouds & Shared Responsibility: Lessons from Vulnerability Disclosure
2021-10-26 21:22:26
Major Container Security Flaw Threatens Cascading Attacks
2019-02-12 18:28:41
Rethinking Cyber-Defense Strategies in the Public-Cloud Age
2022-04-19 17:29:49
vmware
vmware
VMware product updates resolve mishandled file descriptor vulnerability in runc container runtime.
2019-02-15 00:00:00
VMware product updates resolve mishandled file descriptor vulnerability in runc container runtime.
2019-02-15 00:00:00
f5
f5
K46421255 : Docker privilege elevation vulnerability CVE-2019-5736
2019-03-01 00:00:00
exploitpack
exploitpack
runc 1.0-rc6 (Docker 18.09.2) - Container Breakout (2)
2019-02-13 00:00:00
virtuozzo
virtuozzo
Important kernel security update: Virtuozzo ReadyKernel patch 72.0 for all supported Virtuozzo kernels and that of Virtuozzo Infrastructure Platform 2.5
2019-02-12 00:00:00
mageia
mageia
Updated opencontainers-runc packages fix security vulnerability
2019-02-13 14:08:25
Updated lxc packages fix security vulnerability
2019-02-17 03:31:02
trendmicroblog
trendmicroblog
This Week in Security News: Instagram Hackers and Enterprise Threats
2019-03-01 14:57:50
Attacking Containers and runC
2019-02-12 19:22:35
thn
thn
Microsoft Warns of Cross-Account Takeover Bug in Azure Container Instances
2021-09-10 05:07:00
RunC Flaw Lets Attackers Escape Linux Containers to Gain Root on Hosts
2019-02-12 08:59:00
qualysblog
qualysblog
RunC Container Breakout Vulnerability
2019-02-12 15:46:10
archlinux
archlinux
[ASA-201902-6] runc: privilege escalation
2019-02-11 00:00:00
[ASA-201902-20] flatpak: privilege escalation
2019-02-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package runc version 1.0.0-alt7.git0a012df
2019-02-20 00:00:00
Security fix for the ALT Linux 10 package runc version 1.0.0-alt7.git0a012df
2019-02-13 00:00:00
almalinux
almalinux
Important: container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
cbl_mariner
cbl_mariner
CVE-2019-5736 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
kitploit
kitploit
Whoc - A Container Image That Extracts The Underlying Container Runtime
2021-11-24 11:30:00
Kubesploit - A Cross-Platform Post-Exploitation HTTP/2 Command And Control Server And Agent Written In Golang
2021-04-22 12:30:00
Botb - A Container Analysis And Exploitation Tool For Pentesters And Engineers
2019-09-10 20:33:00
checkpoint_advisories
checkpoint_advisories
runc Container Escape (CVE-2019-5736)
2019-02-14 00:00:00
cisco
cisco
Container Privilege Escalation Vulnerability Affecting Cisco Products: February 2019
2019-02-15 17:00:00
cloudfoundry
cloudfoundry
CVE-2019-5736: runC container breakout | Cloud Foundry
2019-02-13 00:00:00
rocky
rocky
container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
exploitdb
exploitdb
runc &lt; 1.0-rc6 (Docker &lt; 18.09.2) - Container Breakout (2)
2019-02-13 00:00:00
kaspersky
kaspersky
KLA11821 Multiple vulnerabilities in Microsoft Azure
2019-07-09 00:00:00
packetstorm
packetstorm
Docker Container Escape
2021-07-01 00:00:00
metasploit
metasploit
Docker Container Escape Via runC Overwrite
2021-06-30 09:02:11
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-07-02 18:44:54

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.6%

JSON
Related for USN-4048-1
nessus43openvas22oraclelinux8ibm8alpinelinux2redhat6redhatcve3cve4amazon2suse7debiancve3pentestit1veracode3myhack581osv6prion4mscve1ubuntucve4hackerone3impervablog1fedora16zdt3githubexploit11photon3threatpost4vmware2f51exploitpack1virtuozzo1mageia2trendmicroblog2thn2qualysblog1archlinux2altlinux2almalinux1cbl_mariner1kitploit3checkpoint_advisories1cisco1cloudfoundry1rocky1exploitdb1kaspersky1packetstorm1metasploit1rapid7blog1