google / google/gnxi

Security risk due to unprotected TCP socket.

Open
#356 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
289
Forks
131
Avg merge
1d 28m
Merged PRs (30d)
1

Description

Docker is a software container platform which is used to run applications side by side within isolated containers. There exists a vulnerability due to the unprotected TCP socket where an attacker can create a Docker container with read and write permissions on the host server enabling them to edit files owned by root.

Impacted version: https://github.com/moby/moby/tree/v1.13.1

Reported by Blackduck scan.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.