Debian/docker.io: high 7.5
In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to
Action: Upgrade docker.io to 18.09.1+dfsg1-7.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 18.09.1+dfsg1-7.1 | - |
Fixed versions
| 18.09.1+dfsg1-7.1 |
Sources
- osv: DEBIAN-CVE-2018-15664#Debian:14/docker.io
- https://security-tracker.debian.org/tracker/CVE-2018-15664
published · modified · JSON