Description
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Docker Docker Engine
before 1.8.3affected
Docker CS Docker Engine
before 1.6.2-CS7affected
References
- http://lists.opensuse.org/opensuse-updates/2015-10/msg00036.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00014.html ↗
- https://groups.google.com/forum/#%21msg/docker-dev/bWVVtLNbFy8/UaefOqMOCAAJ ↗
- https://github.com/docker/docker/blob/master/CHANGELOG.md#183-2015-10-12 ↗
- https://blog.docker.com/2015/10/security-release-docker-1-8-3-1-6-2-cs7/ ↗
- https://www.docker.com/legal/docker-cve-database ↗