CVE-2016-7569 Directory traversal vulnerability in docker2aci before 0.13.0 allows remote attackers to write to arbitrary files via a .. (dot dot) in the embedded layer data in an image.
MediumCVSS 5.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in docker2aci before 0.13.0 allows remote attackers to write to arbitrary files via a .. (dot dot) in the embedded layer data in an image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/golang-github-appc-docker2aci(Ubuntu:22.04) | All versions | No fix listed |
| debian/golang-github-appc-docker2aci(Debian:11) | < 0.14.0+dfsg-1 | 0.14.0+dfsg-1 |
| docker2aci project docker2aci | <= 0.12.3 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- security-tracker.debian.org vendor-advisory
- [oss-security] 20160928 CVE Request: docker2aci: Path traversals present in image converting exploit mailing-list third-party-advisory
- [oss-security] 20160928 Re: CVE Request: docker2aci: Path traversals present in image converting mailing-list patch third-party-advisory
- 93194 third-party-advisory vdb-entry
- github.com issue-tracking patch third-party-advisory
- github.com issue-tracking patch release-notes third-party-advisory