AVG-2440 log

Package	docker
Status	Fixed
Severity	Medium
Type	multiple issues
Affected	1:20.10.8-1
Fixed	1:20.10.9-1
Current	1:29.0.2-1 [extra-testing] 1:28.5.2-1 [extra]
Ticket	None
Created	Mon Oct 4 21:27:41 2021

Issue	Severity	Remote	Type	Description
CVE-2021-41092	Low	No	Information disclosure	A bug was found in the Docker CLI where running docker login my- private-registry.example.com with a misconfigured configuration file (typically...
CVE-2021-41091	Medium	No	Directory traversal	A bug was found in Moby (Docker Engine) where the data directory (typically /var/lib/docker) contained subdirectories with insufficiently restricted...
CVE-2021-41089	Low	No	Information disclosure	A bug was found in Moby (Docker Engine) where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission...

Issue

Severity

Remote

Type

Description

CVE-2021-41092

Low

Information disclosure

A bug was found in the Docker CLI where running docker login my- private-registry.example.com with a misconfigured configuration file (typically...

CVE-2021-41091

Medium

Directory traversal

A bug was found in Moby (Docker Engine) where the data directory (typically /var/lib/docker) contained subdirectories with insufficiently restricted...

CVE-2021-41089

Low

Information disclosure

A bug was found in Moby (Docker Engine) where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission...