PT-2018-10164 · Docker+1 · Docker+1

Antonio Murdaca

+1

·

Publicado

2018-07-06

·

Atualizado

2025-10-11

·

CVE-2018-10892

CVSS v3.1

6.3

Média

VetorAV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Docker/Moby versions 1.11 through current
Description The issue concerns the default OCI linux spec in Docker/Moby, which fails to block /proc/acpi pathnames. This flaw allows an attacker to modify the host's hardware, such as enabling or disabling Bluetooth, or adjusting keyboard brightness.
Recommendations For Docker/Moby versions 1.11 through current, consider restricting access to the /proc/acpi pathnames to prevent unauthorized modification of the host's hardware. As a temporary workaround, restrict the functionality that utilizes the /proc/acpi path to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-250

Identificadores relacionados

CVE-2018-10892
MGASA-2018-0398
OPENSUSE-SU-2019:2021-1
OPENSUSE-SU-2019_2021-1
OPENSUSE-SU-2024:10722-1
OPENSUSE-SU-2025:15589-1
RHSA-2018:2482
SUSE-SU-2019:2117-1
SUSE-SU-2019:2119-1
SUSE-SU-2025:03540-1
SUSE-SU-2025:03545-1

Produtos afetados

Docker
Suse