In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon/archive.go does not do archive operations on a frozen filesystem (or from within a chroot).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade docker | Aug 22, 2024 | May 23, 2019 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade docker | Jul 4, 2022 | May 23, 2019 |
| Amazon_linux | — | Upgrade docker | Jul 27, 2019 | May 23, 2019 |
| Centos_linux | — | Upgrade docker-rhel-push-pluginUpgrade docker-logrotateUpgrade docker-lvm-pluginUpgrade docker-novolume-pluginUpgrade docker-clientUpgrade docker-commonUpgrade dockerUpgrade docker-v1.10-migratorUpgrade docker-debuginfo | Aug 28, 2019 | May 23, 2019 |
| Debian | — | Upgrade docker.io | Jul 30, 2024 | May 23, 2019 |
| Docker_ce | — | Upgrade Docker CE to version 18.06.1 or later | Nov 25, 2019 | May 23, 2019 |
| Oracle_linux | — | Upgrade docker-cliUpgrade runcUpgrade docker-engine | Jun 14, 2019 | May 23, 2019 |
| Redhat_linux | — | Upgrade docker-clientUpgrade docker-v1.10-migratorUpgrade docker-commonUpgrade docker-logrotateUpgrade docker-novolume-pluginUpgrade docker-rhel-push-pluginUpgrade docker-debuginfoUpgrade dockerUpgrade docker-lvm-plugin | Jul 30, 2019 | May 23, 2019 |
| Suse | — | Upgrade docker-zsh-completionUpgrade dockerUpgrade docker-testUpgrade fuse-overlayfsUpgrade podmanUpgrade libfuse3-3Upgrade fuse3Upgrade fuse3-docUpgrade docker-fish-completionUpgrade podman-cni-configUpgrade libcontainers-commonUpgrade slirp4netnsUpgrade docker-bash-completionUpgrade fuse3-devel | Jun 27, 2019 | May 23, 2019 |
| Ubuntu | — | Upgrade docker.io | Jul 9, 2019 | May 23, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub