what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Tonis Tiigi

Docker Engine Privilege Escalation

Posted Jan 10, 2017

Authored by Tonis Tiigi, Aleksa Sarai

Docker Engine versions prior to 1.12.6 suffer from an insecure open of a file descriptor.

tags | advisory

advisories | CVE-2016-9962

SHA-256 | c6dd4934c055006df86b6145b7e548b07287014ac26ce1af46e0b6fa783d1157

Download | Favorite | View

Docker Privilege Escalation / Information Disclosure

Posted May 8, 2015

Authored by Eric Windisch, Tonis Tiigi

Docker versions prior to 1.6.1 suffer from privilege escalation and information disclosure vulnerabilities.

tags | advisory, vulnerability, info disclosure

advisories | CVE-2015-3627, CVE-2015-3629, CVE-2015-3630, CVE-2015-3631

SHA-256 | 95ee351837d4eafc2ac444cb87bd4b716e7c5f58566ada9fb56a9b758dee33cc

Download | Favorite | View

Docker Privilege Escalation / Path Traversal / Spoofing

Posted Dec 12, 2014

Authored by Eric Windisch, Tonis Tiigi

Docker version 1.3.3 has been released to address privilege escalation, path traversal, and spoofing vulnerabilities.

tags | advisory, spoof, vulnerability, file inclusion

advisories | CVE-2014-9356, CVE-2014-9357, CVE-2014-9358

SHA-256 | 8500831f87dd1053a5b03c9bb78a961217c43693b105c24e9149353125d6553a

Download | Favorite | View