Stories
Slash Boxes
Comments

SoylentNews is people

Unpatched Flaw Affects All Docker Versions, Exploits Ready

posted by martyb on Wednesday May 29 2019, @11:07PM   Printer-friendly
from the what-to-do-now? dept.

Fnord666 writes:

All versions of Docker are currently vulnerable to a race condition that could give an attacker both read and write access to any file on the host system. Proof-of-concept code has been released.

The flaw is similar to CVE-2018-15664 and it offers a window of opportunity for hackers to modify resource paths after resolution but before the assigned program starts operating on the resource. This is known as a time-to-check-time-to-use (TOCTOU) type of bug.

Source:
https://www.bleepingcomputer.com/news/security/unpatched-flaw-affects-all-docker-versions-exploits-ready/

Original Submission

 
This discussion has been archived. No new comments can be posted.
Unpatched Flaw Affects All Docker Versions, Exploits Ready | Log In/Create an Account | Top | 15 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 2, Interesting) by Anonymous Coward on Thursday May 30 2019, @12:01AM (2 children)

    by Anonymous Coward on Thursday May 30 2019, @12:01AM (#849120)

    It is not a breakout from the container but a privilege escalation where the user authorized to manage container can become root. Were I work people with acces to docker-cli are sudoers to root so from the point of view of my organisation it is not a vulnerability.

    Starting Score:    0  points
    Moderation   +2  
       Interesting=1, Informative=1, Total=2
    Extra 'Interesting' Modifier   0  
    Total Score:   2  

  • (Score: 2) by HiThere on Thursday May 30 2019, @12:32AM (1 child)

    by HiThere (866) on Thursday May 30 2019, @12:32AM (#849124) Journal

    Can I suggest that this is another reason that sudo is a very bad idea? And unless you're saying that nobody has access to docker-cli, it's a major problem at your site?

    --
    Javascript is what you use to allow unknown third parties to run software you have no idea about on your computer.

    • (Score: 0) by Anonymous Coward on Thursday May 30 2019, @01:05AM

      by Anonymous Coward on Thursday May 30 2019, @01:05AM (#849134)

      If you give sudo to untrustworthy people sure it a problem, but in a small team it's not.