Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Wednesday May 29 2019, @11:07PM   Printer-friendly
from the what-to-do-now? dept.

All versions of Docker are currently vulnerable to a race condition that could give an attacker both read and write access to any file on the host system. Proof-of-concept code has been released.

The flaw is similar to CVE-2018-15664 and it offers a window of opportunity for hackers to modify resource paths after resolution but before the assigned program starts operating on the resource. This is known as a time-to-check-time-to-use (TOCTOU) type of bug.

Source:
https://www.bleepingcomputer.com/news/security/unpatched-flaw-affects-all-docker-versions-exploits-ready/


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Thursday May 30 2019, @01:19AM

    by Anonymous Coward on Thursday May 30 2019, @01:19AM (#849142)

    Docker is the the facto standard in container. And containers are like chroot but more dynamic on the network side.