Beveiligingsadvies

CVE-2017-16539

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-11-04 17:00:00

Laatst bijgewerkt 2026-01-27 20:39:44

Toegewezen door mitre

CVSS-score 5.9

Status PUBLISHED

Beschrijving

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain older Linux kernels are used) by leveraging Docker container access to write a "scsi remove-single-device" line to /proc/scsi/scsi, aka SCSI MICDROP.

← Alle CVE's bekijken Bekijk op cve.org ↗