CVE-2021-21285CWE-400

Docker daemon crash during image pull of malicious image

Medium · published February 2, 2021

CVSS v3.1
6.5
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03287 · 88.4th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-02-02T17:55Z
EPSS history
Timeline
  • 02 FEB 17:55Z
    Docker daemon crash during image pull of malicious image
    cvelistv5