InfraGuard

Docker Engine 17.0 漏洞

影响 Docker Engine 17.0 系列的已知 CVE 共 9 个。

8.8 最高 CVSS
检查您的版本docker --version

影响 17.0 的 CVE

CVE 标题 CVSS 被利用 EPSS 发布日期
CVE-2018-15514 HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stabl... 8.8 — 2018-09-01
CVE-2019-5736 runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the h... 8.6 — 2019-02-11
CVE-2019-13139 In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "dock... 8.4 — 2019-08-23
CVE-2019-13509 In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10),... 7.5 — 2019-07-19
CVE-2019-16884 runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction b... 7.5 — 2019-09-25
CVE-2021-21284 privilege escalation in Moby 6.8 — 2021-02-03
CVE-2021-21285 Docker daemon crash during image pull of malicious image 6.5 — 2021-02-03
CVE-2018-10892 The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc... 6.3 — 2018-07-07
CVE-2020-27534 util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsa... 5.3 — 2020-12-31

在您自己的服务器上追踪这些版本

InfraGuard 从每台服务器收集已安装软件的版本,并标出存在已知漏洞的版本。自托管部署——数据不会离开您的网络。

每周已被利用漏洞摘要

每周一次,推送与自托管服务器相关的 KEV 新增条目。不发送其他邮件。

数据来源:CVE List(CVE® Program)、NVD、CISA KEV、FIRST EPSS(EPSS 详见 https://www.first.org/epss)、endoflife.date。软件列表:awesome-selfhosted(CC BY-SA 3.0)。