This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-14271 →

DEBIAN-CVE-2019-14271

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a...

Original description

The description as published by the source.

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 docker.io

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.1+dfsg1-9"}]}]

Debian:13 docker.io

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.1+dfsg1-9"}]}]

Debian:14 docker.io

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.1+dfsg1-9"}]}]

References

advisory security-tracker.debian.org