CVE-2019-14271

    Dashboard / Vulnerabilities / CVE-2019-14271

    CVE-2019-14271

    Published: 29 Jul 2019Last Modified: 27 Aug 2026

    Summary:

    Details: In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

    References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html, https://docs.docker.com/engine/release-notes/, https://github.com/moby/moby/issues/39449, https://seclists.org/bugtraq/2019/Sep/21, https://security.netapp.com/advisory/ntap-20190828-0003/, https://www.debian.org/security/2019/dsa-4521

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- aeac9490dc54c1d48b3d7ae9a46f5a19b78dcd3a
    Fixed -74b1e89e8ac68948be88fe0aa1e2767ae28659fe

    Affected versions

    v19.03.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2019-14271 | CVE-DB