Lack of data validation - Path Traversal In github.com/docker/docker
Description
Path Traversal in Moby builder util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
go | 19.03.9 | ||
go | 19.03.9 | ||
go | 19.03.9 |
Aliases
1. 2. 3. 4.
References
1. 2. 3. 4.