PT-2017-11619 · Docker+1 · Docker+1

Ben Murphy · Published 2017-07-07 · Updated 2019-10-09 · CVE-2017-10940

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Joyent Smart Data Center versions prior to agentsshar@1.0.0-release-20160901-20160901T051624Z-g3fd5adf

Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the docker API, which does not properly validate user-supplied data, allowing for the upload of arbitrary files. An attacker can leverage this to execute arbitrary code under the context of root.

Recommendations For versions prior to agentsshar@1.0.0-release-20160901-20160901T051624Z-g3fd5adf, consider disabling the docker API until a patch is available to prevent the upload of arbitrary files and mitigate the risk of arbitrary code execution. Restrict access to the docker API to minimize the risk of exploitation.

Fix

Path traversal

Unrestricted File Upload

Weakness Enumeration

CWE-22

CWE-434

Related Identifiers

CVE-2017-10940

ZDI-17-453

Affected Products

Docker

Joyent Smartos

References · 4

• https://zerodayinitiative.com/advisories/ZDI-17-453 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-10940 · Security Note
• https://help.joyent.com/hc/en-us/articles/115009649927-Security-Advisory-ZDI-CAN-3853-Docker-File-Overwrite-Vulnerability · Vendor Advisory
• http://securityfocus.com/bid/99510 · Note