Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: moby — GLSA-202107-23 Clear all filters
TI-2021-04384 CVE-2021-21284 · GHSA-7452-xqpj-6rpc

privilege escalation in Moby

Priority LOW 32

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root.

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.01078 Published 2021-02-02 Partial fix · 19.03.15, 20.10.3 +1 CWE-22
TI-2021-04385 CVE-2021-21285 · GHSA-6fj5-m822-rqx8

Docker daemon crash during image pull of malicious image

Priority LOW 35

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03327 Published 2021-02-02 Partial fix · 19.03.15, 20.10.3 +1 CWE-400