CVE-2017-14992

Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:docker:docker:*:*:*:*:community:*:*:*
cpe:2.3:a:docker:docker:1.12.6-0:*:*:*:community:*:*:*
cpe:2.3:a:docker:docker:17.03.0:*:*:*:community:*:*:*
cpe:2.3:a:docker:docker:17.03.1:*:*:*:community:*:*:*
cpe:2.3:a:docker:docker:17.03.2:*:*:*:community:*:*:*
cpe:2.3:a:docker:docker:17.06.0:*:*:*:community:*:*:*
cpe:2.3:a:docker:docker:17.06.1:*:*:*:community:*:*:*
cpe:2.3:a:docker:docker:17.06.2:*:*:*:community:*:*:*
cpe:2.3:a:docker:docker:17.09.0:*:*:*:community:*:*:*

History

14 Feb 2024, 01:17

Type Values Removed Values Added
References () https://blog.cloudpassage.com/2017/10/13/discovering-docker-cve-2017-14992/ - Third Party Advisory () https://blog.cloudpassage.com/2017/10/13/discovering-docker-cve-2017-14992/ - Third Party Advisory, URL Repurposed

Information

Published : 2017-11-01 17:29

Updated : 2024-02-14 01:17


NVD link : CVE-2017-14992

Mitre link : CVE-2017-14992

CVE.ORG link : CVE-2017-14992


JSON object : View

Products Affected

docker

  • docker
CWE
CWE-20

Improper Input Validation