Database/Container, Kubernetes & orchestration
Docker / moby: Code injection into `docker cp` via nsswitch loading a library from the container chroot
CVSS 9.8CVE-2019-14271Container, Kubernetes & orchestrationcurated
Impact
Code injection into docker cp via nsswitch loading a library from the container chroot; host root
Who can reach it
Malicious image
What to do
Upgrade Docker Engine; daemon restart
References
Related entries
- Docker / moby: Command execution via crafted remote git build path in `docker build`CVE-2019-13139 · Docker / mobyHigh
- Docker / moby: Race condition in the streamformatter package causing data corruption or daemon crashCVE-2024-36623 · Docker / mobyHigh
- Docker / moby: `docker cp` symlink-exchange TOCTOU gives arbitrary host read/write as rootCVE-2018-15664 · Docker / mobyHigh
- Docker / moby: Docker Engine in debug mode writes secrets into the debug logCVE-2019-13509 · Docker / mobyHigh
- Docker / moby: Swarm overlay-network encryption silently not appliedCVE-2023-28840 · Docker / mobyHigh
- Docker / moby: Race condition during `docker cp` mount setup allows escape/host accessCVE-2026-42306 · Docker / mobyHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.