Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2017-14992

Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing. (CVE-2017-14992)

Source

ALAS2NITRO-ENCLAVES-2021-006

Amazon Linux 2 Security Advisory: ALASNITRO-ENCLAVES-2021-006
Advisory Release Date: 2021-10-19 19:16 Pacific
Advisory Updated Date: 2021-11-18 21:37 Pacific

Severity: Medium

References: CVE-2017-14992

Issue Overview:

Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing. (CVE-2017-14992)

Affected Packages:

docker

Issue Correction:
Run yum update docker to update your system.

New Packages:

src:
    docker-17.12.1ce-2.amzn2.src

x86_64:
    docker-17.12.1ce-2.amzn2.x86_64
    docker-debuginfo-17.12.1ce-2.amzn2.x86_64

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ALAS2NITRO-ENCLAVES-2021-006

ALAS2NITRO-ENCLAVES-2021-006

Vulmon Search

About

Products

Connect