バージョンを確認する
docker --version18.02 に影響するCVE
| CVE | タイトル | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|
| CVE-2018-15514 | HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stabl... | 8.8 | — | 2018-09-01 | |
| CVE-2019-5736 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the h... | 8.6 | — | 2019-02-11 | |
| CVE-2019-13139 | In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "dock... | 8.4 | — | 2019-08-23 | |
| CVE-2018-15664 | In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink... | 7.5 | — | 2019-05-23 | |
| CVE-2019-13509 | In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10),... | 7.5 | — | 2019-07-19 | |
| CVE-2019-16884 | runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction b... | 7.5 | — | 2019-09-25 | |
| CVE-2021-21284 | privilege escalation in Moby | 6.8 | — | 2021-02-03 | |
| CVE-2021-21285 | Docker daemon crash during image pull of malicious image | 6.5 | — | 2021-02-03 | |
| CVE-2018-10892 | The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc... | 6.3 | — | 2018-07-07 | |
| CVE-2020-27534 | util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsa... | 5.3 | — | 2020-12-31 |
データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。