Логотип exploitDog
bind:CVE-2021-41089
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-41089

Количество 15

Количество 15

ubuntu логотип

CVE-2021-41089

больше 4 лет назад

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 2.8
EPSS: Низкий
redhat логотип

CVE-2021-41089

больше 4 лет назад

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2021-41089

больше 4 лет назад

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 2.8
EPSS: Низкий
debian логотип

CVE-2021-41089

больше 4 лет назад

Moby is an open-source project created by Docker to enable software co ...

CVSS3: 2.8
EPSS: Низкий
github логотип

GHSA-v994-f8vw-g7j4

больше 1 года назад

`docker cp` allows unexpected chmod of host files in Moby Docker Engine

CVSS3: 2.8
EPSS: Низкий
fstec логотип

BDU:2023-07628

больше 4 лет назад

Уязвимость функционала копирования средства автоматизации развёртывания и управления приложениями в средах с поддержкой контейнеризации Docker, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 6.3
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0334-1

около 4 лет назад

Security update for containerd, docker

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0334-1

около 4 лет назад

Security update for containerd, docker

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0213-1

около 4 лет назад

Security update for containerd, docker

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:3506-1

больше 4 лет назад

Security update for containerd, docker, runc

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:1404-1

больше 4 лет назад

Security update for containerd, docker, runc

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3506-1

больше 4 лет назад

Security update for containerd, docker, runc

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3336-1

больше 4 лет назад

Security update for containerd, docker, runc

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03545-1

4 месяца назад

Security update for docker-stable

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03540-1

4 месяца назад

Security update for docker-stable

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-41089

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 2.8
0%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-41089

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 5.3
0%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-41089

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 2.8
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-41089

Moby is an open-source project created by Docker to enable software co ...

CVSS3: 2.8
0%
Низкий
больше 4 лет назад
github логотип
GHSA-v994-f8vw-g7j4

`docker cp` allows unexpected chmod of host files in Moby Docker Engine

CVSS3: 2.8
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2023-07628

Уязвимость функционала копирования средства автоматизации развёртывания и управления приложениями в средах с поддержкой контейнеризации Docker, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 6.3
0%
Низкий
больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2022:0334-1

Security update for containerd, docker

около 4 лет назад
suse-cvrf логотип
SUSE-SU-2022:0334-1

Security update for containerd, docker

около 4 лет назад
suse-cvrf логотип
SUSE-SU-2022:0213-1

Security update for containerd, docker

около 4 лет назад
suse-cvrf логотип
openSUSE-SU-2021:3506-1

Security update for containerd, docker, runc

больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2021:1404-1

Security update for containerd, docker, runc

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:3506-1

Security update for containerd, docker, runc

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:3336-1

Security update for containerd, docker, runc

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2025:03545-1

Security update for docker-stable

4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:03540-1

Security update for docker-stable

4 месяца назад

Уязвимостей на страницу