Red Hat Security Advisory

RHSA-2019:1910

docker security and bug fix update

Released 2019-07-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras docker-2:1.13.1-102.git7f2769b.el7, docker-client-2:1.13.1-102.git7f2769b.el7, docker-common-2:1.13.1-102.git7f2769b.el7 +5

Fixes 1 record

TI-2018-11159 CVE-2018-15664 · GHSA-pv79-5r2c-jrpq

In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are…

LOW 39

In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem…

CVSS 3.0HIGH 7.5 Local Low privileges User interaction EPSS 0.03427 Published 2019-05-23 Partial fix CWE-362