Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 519
Alerts This Week
Warning Icon 1 519

Ubuntu 19.04 18.04 16.04: USN-4103-2 Critical Docker Denial Of Service

ubuntu
Calendar Grey August 19, 2019
Dist Ubuntu Esm H88
Ensure your Linux distributions are updated to address the Docker vulnerability, safeguarding against system failures or unwarranted script execution.
Docker could be made to crash or run programs as your login.

Summary

Docker could be made to crash or run programs as your login.

Software Description:

- docker.io: Linux container runtime

Details:

Jasiel Spelman discovered that a double free existed in the docker-credential-helpers dependency of Docker. A local attacker could use this to cause a denial

of service

(crash) or possibly execute arbitrary code.

Original advisory details:

Jasiel Spelman discovered that a double free existed in docker-credential- helpers. A local attacker could use this to cause a denial of service

(crash) or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service code execution Ubuntu Docker

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  docker.io                       18.09.7-0ubuntu1~19.04.5

Ubuntu 18.04 LTS:
  docker.io                       18.09.7-0ubuntu1~18.04.4

Ubuntu 16.04 LTS:
  docker.io                       18.09.7-0ubuntu1~16.04.5

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4103-1

CVE-2019-1020014

Severity
critical
Lowest
Low
Medium
High
Critical

August 19, 2019

Topics%20covered

Topics Covered

security advisory denial of service code execution Ubuntu Docker

Package Information

https://launchpad.net/ubuntu/+source/docker.io/18.09.7-0ubuntu1~19.04.5
https://launchpad.net/ubuntu/+source/docker.io/18.09.7-0ubuntu1~18.04.4
https://launchpad.net/ubuntu/+source/docker.io/18.09.7-0ubuntu1~16.04.5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.