Debian/docker.io: high 7.5
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject
Action: Upgrade docker.io to 1.8.3~ds1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.3~ds1-1 | - |
Fixed versions
| 1.8.3~ds1-1 |
Sources
published · modified · JSON