Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use several vulnerabilities of Docker.

Impacted products: Docker Open Source, openSUSE, openSUSE Leap.

Severity: 2/4.

Creation date: 19/10/2015.

DESCRIPTION OF THE VULNERABILITY

Several vulnerabilities were announced in Docker.

An attacker can use a Layer ID, in order to corrupt the graph.
[severity:2/4; CVE-2014-8178]

An attacker can bypass the Manifest validation. [severity:2/4;
CVE-2014-8179]

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Docker-Engine-two-vulnerabilities-18131