Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems or --cpuset-cpus value, related to daemon/daemon_unix.go, pkg/parsers/parsers.go, and pkg/sysinfo/sysinfo.go.
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade docker-debuginfo | Jul 4, 2022 | Jan 12, 2019 |
| Centos_linux | — | Upgrade docker-logrotateUpgrade docker-debuginfoUpgrade docker-clientUpgrade docker-v1.10-migratorUpgrade docker-rhel-push-pluginUpgrade docker-commonUpgrade dockerUpgrade docker-novolume-pluginUpgrade docker-lvm-plugin | Aug 28, 2019 | Jan 12, 2019 |
| Debian | — | Upgrade docker.io | Jul 30, 2024 | Jan 12, 2019 |
| Oracle_linux | — | Upgrade docker-engine | Apr 2, 2019 | Oct 4, 2018 |
| Redhat_linux | — | Upgrade docker-commonUpgrade docker-clientUpgrade docker-v1.10-migratorUpgrade docker-novolume-pluginUpgrade dockerUpgrade docker-lvm-pluginUpgrade docker-logrotateUpgrade docker-rhel-push-pluginUpgrade docker-debuginfo | Mar 14, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade docker-bash-completionUpgrade docker-fish-completionUpgrade docker | Feb 4, 2022 | Jan 11, 2019 |
| Ubuntu | — | Upgrade docker.io | Nov 19, 2024 | Jan 12, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub