In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade docker | Aug 22, 2024 | Feb 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade docker-debuginfo | Jul 4, 2022 | Feb 2, 2021 |
| Amazon_linux | — | Upgrade docker | Nov 16, 2021 | Feb 2, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 2, 2021 |
| Debian | — | Upgrade docker.io | Mar 1, 2021 | Feb 2, 2021 |
| Docker_ce | — | Upgrade Docker CE to the latest version | Feb 17, 2021 | Feb 2, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/docker. | Jul 12, 2021 | Feb 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 19, 2021 | Feb 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engineUpgrade docker-engine-selinux | May 18, 2021 | Feb 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Jun 2, 2021 | Feb 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 2, 2021 |
| Suse | — | Upgrade docker-testUpgrade fishUpgrade docker-fish-completionUpgrade runcUpgrade fish-develUpgrade containerdUpgrade docker-zsh-completionUpgrade docker-runcUpgrade containerd-ctrUpgrade golang-github-docker-libnetworkUpgrade docker-bash-completionUpgrade docker-libnetworkUpgrade docker | Feb 12, 2021 | Feb 2, 2021 |
| Ubuntu | — | Upgrade docker.io | Nov 19, 2024 | Feb 2, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub