VDB
Sign up
HIGH8.4

GHSA-wxj3-qwv4-cvfm

Privilege Escalation in Docker

Quick fix

GHSA-wxj3-qwv4-cvfm — github.com/docker/docker: upgrade to the fixed version with the command below.

go get github.com/docker/docker@v1.0.1

Details

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/docker/docker
Introduced in: 0Fixed in: 1.0.1
Fixgo get github.com/docker/docker@v1.0.1

References