CVE-2019-14271

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1840%

EPSS Percentile25.49th

Published2019年7月29日

Last Modified2024年11月21日

Vulnerability Description

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

Affected Platforms (CPE)

📦

Docker

>= 19.03 and < 19.03.1

💻

Debian

Debian Linux

= 10.0

💻

Opensuse

Leap

= 15.0

💻

Opensuse

Leap

= 15.1

References & Advisories

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html

🔗 https://docs.docker.com/engine/release-notes/

🔗 https://github.com/moby/moby/issues/39449

🔗 https://seclists.org/bugtraq/2019/Sep/21

🔗 https://security.netapp.com/advisory/ntap-20190828-0003/

🔗 https://www.debian.org/security/2019/dsa-4521

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html

🔗 https://docs.docker.com/engine/release-notes/

Vulnerability Description

Affected Platforms (CPE)

Docker

Debian Linux

Leap

Leap

References & Advisories

関連する脆弱性情報