Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.
CVSS Details
- CVSS 3.1 Base Score: 2.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-docker | Aug 22, 2024 | Oct 4, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-dockeramazon-linux-ami-2-upgrade-docker-debuginfo | Jul 4, 2022 | Oct 4, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-docker | May 13, 2025 | Oct 4, 2021 |
| Debian | debian-upgrade-docker-io | Jul 30, 2024 | Oct 4, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-app-containers-docker | Sep 30, 2024 | Oct 4, 2021 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-docker-engine | Aug 18, 2022 | Oct 4, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-docker-engine | Aug 18, 2022 | Oct 4, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-docker-engine | Aug 18, 2022 | Oct 4, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-docker-engine | Sep 14, 2022 | Oct 4, 2021 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Oct 4, 2021 | |
| Suse | — | suse-upgrade-containerdsuse-upgrade-containerd-ctrsuse-upgrade-dockersuse-upgrade-docker-bash-completionsuse-upgrade-docker-fish-completionsuse-upgrade-docker-kubicsuse-upgrade-docker-kubic-bash-completionsuse-upgrade-docker-kubic-fish-completionsuse-upgrade-docker-kubic-kubeadm-criconfigsuse-upgrade-docker-kubic-zsh-completionsuse-upgrade-docker-zsh-completionsuse-upgrade-runc | Oct 26, 2021 | Oct 4, 2021 |
| Ubuntu | ubuntu-pro-upgrade-docker-ioubuntu-upgrade-docker-io | Mar 25, 2022 | Oct 4, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub