WID-SEC-W-2025-2174

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Docker: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2018-02-08

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Docker ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2017-16539USmedium5.9—
The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain ol…
CVE-2017-14992USmedium6.5—
Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan