Most recent entries from all

bdu:2021-01892

Withdrawn: BELL-CVE-2021-21285 — CVE-2021-21285 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2021-avi-490 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Protect. Certaines d'entre elles permettent à un atta…

certfr-2021-avi-490

Withdrawn: CLEANSTART-2026-BK59402 — Moby is an open-source project created by Docker for software containerization

Withdrawn by the publisher.

Affected: CleanStart: docker

Multiple security vulnerabilities affect the docker package. Moby is an open-source project created by Docker for software containerization. See references for individual vulnerability details.

cnvd-2021-27276

EUVD-2026-22075

fkie_cve-2021-21285

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.

GHSA-6fj5-m822-rqx8 — moby docker daemon crash during image pull of malicious image

Affected: Go: github.com/moby/moby

### Impact

Pulling an intentionally malformed Docker image manifest crashes the `dockerd` daemon.

### Patches

Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.

### Credits

Maintainers would like to thank Josh Larsen, Ian Coldwater, Duffie Cooley, Rory McCune for working on the vulnerability and Brad Geesaman for responsibly disclosing it to security@docker.com.

gsd-2021-21285

msrc_CVE-2021-21285 — Docker daemon crash during image pull of malicious image

msrc_CVE-2021-21285

OESA-2021-1102 — docker security update

Affected: openEuler:20.03-LTS: docker, openEuler:20.03-LTS-SP1: docker

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance and everything in between - and they don't require you to use a particular language, framework or packaging system. That makes them great building blocks for deploying and scaling web apps, databases, and backend services without depending on a particular stack or provider. Security Fix(es): In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root. When using --userns-remap, if the root user in the remapped namespace has access to the host filesystem they can modify files under /var/lib/docker/<remapping> that cause writing files with extended privileges. Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user.(CVE-2021-21284) In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.(CVE-2021-21285)

openSUSE-SU-2021:0278-1 — Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

SUSE-SU-2021:0435-1 — Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

UBUNTU-CVE-2021-21285

Affected: Ubuntu:Pro:16.04:LTS: docker.io, Ubuntu:18.04:LTS: docker.io, Ubuntu:20.04:LTS: docker.io

WID-SEC-W-2023-2716 — docker: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in docker ausnutzen, um seine Privilegien zu erhöhen und um einen Denial of Service Angriff durchzuführen.