Download
| Alert*
oval:org.secpod.oval:def:57823
The host is installed with Docker-ce or Docker-ee version 19.03.0 and is prone to a code injection vulnerability. A flaw is present in the application, which fails to handle an issue in GNU C Library (aka glibc). Successful exploitation allows attackers to perform privilege escalation. oval:org.secpod.oval:def:57822 The host is installed with Docker-ce or Docker-ee version 19.03.0 and is prone to a code injection vulnerability. A flaw is present in the application, which fails to handle an issue in GNU C Library (aka glibc). Successful exploitation allows attackers to perform privilege escalation. oval:org.secpod.oval:def:62272 The host is installed with Docker 19.03.x before 19.03.1 and is prone to a code injection vulnerability. A flaw is present in the application, which fails to handle a library loading issue in nsswitch facility. Successful exploitation could allow attackers to obtain sensitive information. oval:org.secpod.oval:def:69756 Three security vulnerabilities have been discovered in the Docker container runtime: Insecure loading of NSS libraries in docker cp could result in execution of code with root privileges, sensitive data could be logged in debug mode and there was a command injection vulnerability in the docker build ... oval:org.secpod.oval:def:604526 Three security vulnerabilities have been discovered in the Docker container runtime: Insecure loading of NSS libraries in quot;docker cpquot; could result in execution of code with root privileges, sensitive data could be logged in debug mode and there was a command injection vulnerability in the qu ... oval:org.secpod.oval:def:1504086 docker-engine [19.03.1-1.0.0] - update to 19.03.1 [19.03-0.0.1] - update to 19.03 |