CVE-2019-14271
Moby Docker cp broken with debian containers
Summary
Moby Docker cp broken with debian containers
Original description
The description as published by the source.
In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
github.com/docker/docker
[{"type":"ECOSYSTEM","events":[{"introduced":"19.03.0"},{"fixed":"19.03.1"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-14271 docker.io Fixed in: 18.09.1+dfsg1-9
References
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web docs.docker.com
- web seclists.org
- web security.netapp.com
- web debian.org
- web lists.opensuse.org