CVE-2018-20699

Summary

Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a –cpuset-mems or –cpuset-cpus value, related to daemon/daemon_unix.go, pkg/parsers/parsers.go, and pkg/sysinfo/sysinfo.go.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/docker/engine/pull/70
• https://github.com/moby/moby/pull/37967
• https://access.redhat.com/errata/RHSA-2019:0487

References

• https://github.com/docker/engine/pull/70
• https://github.com/moby/moby/pull/37967
• https://access.redhat.com/errata/RHSA-2019:0487

• ←Previous
• Next→