https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:43:28.478642+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02690 bdu:2019-02690 2026-10-03T04:43:28.730807+00:00 bdu:2019-02690 https://cve.radiocsirt.org/vuln/bell-cve-2018-15664 Withdrawn: BELL-CVE-2018-15664 — CVE-2018-15664 does not affect BellSoft software 2026-10-03T04:43:28.730855+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2019-avi-322 certfr-2019-avi-322 — De multiples vulnérabilités ont été corrigées dans <span class="textit">les produits Microsoft</span>. Elles permettent… 2026-10-03T04:43:28.730882+00:00 certfr-2019-avi-322 https://cve.radiocsirt.org/vuln/cleanstart-2026-dz08128 Withdrawn: CLEANSTART-2026-DZ08128 — Security fixes in docker 18.09.7-r0 2026-10-03T04:43:28.730923+00:00

Withdrawn by the publisher.

Affected: CleanStart: docker

Package docker version 18.09.7-r0 fixes 1 vulnerabilities: CVE-2018-15664

 https://cve.radiocsirt.org/vuln/cnvd-2019-16272 cnvd-2019-16272 2026-10-03T04:43:28.730965+00:00 cnvd-2019-16272 https://cve.radiocsirt.org/vuln/euvd-2026-67608 EUVD-2026-67608 2026-10-03T04:43:28.730978+00:00 EUVD-2026-67608 https://cve.radiocsirt.org/vuln/fkie_cve-2018-15664 fkie_cve-2018-15664 2026-10-03T04:43:28.730989+00:00

In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon/archive.go does not do archive operations on a frozen filesystem (or from within a chroot).

 https://cve.radiocsirt.org/vuln/ghsa-pv79-5r2c-jrpq GHSA-pv79-5r2c-jrpq 2026-10-03T04:43:28.731011+00:00

In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon/archive.go does not do archive operations on a frozen filesystem (or from within a chroot).

 https://cve.radiocsirt.org/vuln/gsd-2018-15664 gsd-2018-15664 2026-10-03T04:43:28.731027+00:00 gsd-2018-15664 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1621-1 openSUSE-SU-2019:1621-1 — Security update for docker 2026-10-03T04:43:28.731037+00:00

Security update for docker

 https://cve.radiocsirt.org/vuln/rhsa-2019:1910 RHSA-2019:1910 — Red Hat Security Advisory: docker security and bug fix update 2026-10-03T04:43:28.731054+00:00

docker: symlink-exchange race attacks in docker cp

 https://cve.radiocsirt.org/vuln/suse-su-2019:1514-1 SUSE-SU-2019:1514-1 — Security update for docker 2026-10-03T04:43:28.731069+00:00

Security update for docker

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-15664 UBUNTU-CVE-2018-15664 2026-10-03T04:43:28.731083+00:00

Affected: Ubuntu:16.04:LTS: docker.io, Ubuntu:18.04:LTS: docker.io

In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon/archive.go does not do archive operations on a frozen filesystem (or from within a chroot).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2177 WID-SEC-W-2025-2177 — docker: Schwachstelle ermöglicht Privilegieneskalation 2026-10-03T04:43:28.731104+00:00

Ein lokaler Angreifer kann eine Schwachstelle in docker ausnutzen, um seine Privilegien zu erhöhen.