Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 15

Количество 15

ubuntu логотип

CVE-2021-41089

почти 5 лет назад

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 2.8
EPSS: Низкий
redhat логотип

CVE-2021-41089

почти 5 лет назад

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2021-41089

почти 5 лет назад

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 2.8
EPSS: Низкий
debian логотип

CVE-2021-41089

почти 5 лет назад

Moby is an open-source project created by Docker to enable software co ...

CVSS3: 2.8
EPSS: Низкий
github логотип

GHSA-v994-f8vw-g7j4

около 2 лет назад

`docker cp` allows unexpected chmod of host files in Moby Docker Engine

CVSS3: 2.8
EPSS: Низкий
fstec логотип

BDU:2023-07628

почти 5 лет назад

Уязвимость функционала копирования средства автоматизации развёртывания и управления приложениями в средах с поддержкой контейнеризации Docker, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 6.3
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0334-1

больше 4 лет назад

Security update for containerd, docker

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0334-1

больше 4 лет назад

Security update for containerd, docker

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0213-1

больше 4 лет назад

Security update for containerd, docker

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:3506-1

почти 5 лет назад

Security update for containerd, docker, runc

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:1404-1

почти 5 лет назад

Security update for containerd, docker, runc

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3506-1

почти 5 лет назад

Security update for containerd, docker, runc

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3336-1

почти 5 лет назад

Security update for containerd, docker, runc

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03545-1

11 месяцев назад

Security update for docker-stable

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03540-1

11 месяцев назад

Security update for docker-stable

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-41089

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 2.8
0%
Низкий
почти 5 лет назад
redhat логотип
CVE-2021-41089

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 5.3
0%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-41089

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

CVSS3: 2.8
0%
Низкий
почти 5 лет назад
debian логотип
CVE-2021-41089

Moby is an open-source project created by Docker to enable software co ...

CVSS3: 2.8
0%
Низкий
почти 5 лет назад
github логотип
GHSA-v994-f8vw-g7j4

`docker cp` allows unexpected chmod of host files in Moby Docker Engine

CVSS3: 2.8
0%
Низкий
около 2 лет назад
fstec логотип
BDU:2023-07628

Уязвимость функционала копирования средства автоматизации развёртывания и управления приложениями в средах с поддержкой контейнеризации Docker, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 6.3
0%
Низкий
почти 5 лет назад
suse-cvrf логотип
openSUSE-SU-2022:0334-1

Security update for containerd, docker

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2022:0334-1

Security update for containerd, docker

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2022:0213-1

Security update for containerd, docker

больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2021:3506-1

Security update for containerd, docker, runc

почти 5 лет назад
suse-cvrf логотип
openSUSE-SU-2021:1404-1

Security update for containerd, docker, runc

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:3506-1

Security update for containerd, docker, runc

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:3336-1

Security update for containerd, docker, runc

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2025:03545-1

Security update for docker-stable

11 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:03540-1

Security update for docker-stable

11 месяцев назад

Уязвимостей на страницу