docker2aci project vulnerabilities

Products

• docker2aci 2

Latest docker2aci project CVEs

Newest publication first

1. CVE-2016-7569 Directory traversal vulnerability in docker2aci before 0.13.0 allows remote attackers to write to arbitrary files via a .. (dot dot) in the embedded layer data in an image.

   Published 2017-01-27

   Medium·CVSS 5.5 EPSS 3.5%

   Directory traversal vulnerability in docker2aci before 0.13.0 allows remote attackers to write to arbitrary files via a .. (dot dot) in the embedded layer data in an image.

2. CVE-2016-8579 Denial of Service in docker2aci

   Published 2016-10-28

   Medium·CVSS 4.0 EPSS 0.36%

   docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.