Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems or --cpuset-cpus value, related to daemon/daemon_unix.go, pkg/parsers/parsers.go, and pkg/sysinfo/sysinfo.go.
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade docker-debuginfo | Jul 4, 2022 | Jan 12, 2019 |
| Centos_linux | — | Upgrade docker-debuginfoUpgrade docker-clientUpgrade docker-logrotateUpgrade docker-v1.10-migratorUpgrade docker-commonUpgrade docker-novolume-pluginUpgrade docker-rhel-push-pluginUpgrade docker-lvm-pluginUpgrade docker | Aug 28, 2019 | Jan 12, 2019 |
| Debian | — | Upgrade docker.io | Jul 30, 2024 | Jan 12, 2019 |
| Oracle_linux | — | Upgrade docker-engine | Apr 2, 2019 | Oct 4, 2018 |
| Redhat_linux | — | Upgrade docker-novolume-pluginUpgrade dockerUpgrade docker-logrotateUpgrade docker-lvm-pluginUpgrade docker-debuginfoUpgrade docker-rhel-push-pluginUpgrade docker-commonUpgrade docker-v1.10-migratorUpgrade docker-client | Mar 14, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade docker-bash-completionUpgrade docker-fish-completionUpgrade docker | Feb 4, 2022 | Jan 11, 2019 |
| Ubuntu | — | Upgrade docker.io | Nov 19, 2024 | Jan 12, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub