In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade docker | Aug 22, 2024 | Feb 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade docker | Jul 4, 2022 | Feb 2, 2021 |
| Amazon_linux | — | Upgrade docker | Nov 16, 2021 | Feb 2, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 2, 2021 |
| Debian | — | Upgrade docker.io | Mar 1, 2021 | Feb 2, 2021 |
| Docker_ce | — | Upgrade Docker CE to the latest version | Feb 17, 2021 | Feb 2, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/docker. | Jul 12, 2021 | Feb 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 19, 2021 | Feb 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 18, 2021 | Feb 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | Jun 2, 2021 | Feb 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 2, 2021 |
| Suse | — | Upgrade runcUpgrade docker-fish-completionUpgrade docker-testUpgrade fishUpgrade containerdUpgrade fish-develUpgrade docker-bash-completionUpgrade dockerUpgrade docker-runcUpgrade docker-zsh-completionUpgrade docker-libnetworkUpgrade containerd-ctrUpgrade golang-github-docker-libnetwork | Feb 12, 2021 | Feb 2, 2021 |
| Ubuntu | — | Upgrade docker.io | Nov 19, 2024 | Feb 2, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub