Privilege Escalation

🗓️ 09 Feb 2021 12:44:09Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

docker vulnerability to privilege escalatio

Reporter	Title	Published	Views	Family All 127
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Docker affects IBM InfoSphere Information Server	1 Apr 202121:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Docker affect IBM Cloud Pak System	19 Jul 202112:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Automation Manager Content Runtime is affected by an issue with Docker before 19.03.15.	22 Apr 202114:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Docker vulnerabilities (CVE-2021-21285, CVE-2021-21284)	3 Sep 202112:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by vulnerabilities in Docker (CVE-2021-21285, CVE-2021-21284)	9 Mar 202113:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in MongoDB, Node.js, Docker, and XStream affect IBM Spectrum Protect Plus	28 Jun 202120:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Managed Service Content Runtime is affected by an issue with Docker before 19.03.15.	22 Apr 202114:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Python, Docker, and ICP affect IBM Spectrum Discover	13 May 202116:56	–	ibm

Vulners

Node

docker.io docker.ioMatch19.03.13+dfsg3-1debian

AND

debian debian_linuxMatch999

docker.io docker.ioMatch19.03.13+dfsg1-3debian

AND

debian debian_linuxMatch11

docker dockerMatch19.03.9-r0os

AND

alpinelinux alpine_linuxMatch3.12

docker.io docker.ioMatch18.09.1+dfsg1-7.1+deb10u2debian

AND

debian debian_linuxMatch10

docker dockerMatch19.03.10-r0os

AND

docker dockerMatch19.03.6-r2os

AND

docker dockerMatch19.03.7-r0os

AND

docker dockerMatch19.03.8-r1os

AND

docker dockerMatch19.03.8-r0os

AND

alpinelinux alpine_linuxMatchedge

google bionicMatch19.03.6-0ubuntu1~18.04.1debian

AND

google bionicMatch18.09.7-0ubuntu1~18.04.4debian

AND

google bionicMatch19.03.6-0ubuntu1~18.04.2debian

AND

google bionicMatch17.12.1-0ubuntu1debian

AND

debian debian_linux

hirsute hirsuteMatch19.03.13-0ubuntu3debian

AND

debian debian_linux

focal focalMatch19.03.8-0ubuntu1debian

AND

focal focalMatch19.03.8-0ubuntu1.20.04debian

AND

focal focalMatch19.03.8-0ubuntu1.20.04.1debian

AND

debian debian_linux

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-21284
debian	www.debian.org/security/2021/dsa-4865
security	www.security.gentoo.org/glsa/202107-23
docs	www.docs.docker.com/engine/release-notes/
github	www.github.com/moby/moby/commit/64bd4485b3a66a597c02c95f5776395e540b2c7c
github	www.github.com/moby/moby/releases/tag/v19.03.15
github	www.github.com/moby/moby/releases/tag/v20.10.3
github	www.github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc
security	www.security.netapp.com/advisory/ntap-20210226-0005/

29 Apr 2022 20:21Current

4Medium risk

Vulners AI Score4

CVSS 3.16.8

CVSS 22.7

EPSS0.0002