摘要:
The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host s hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.
安全等级: Low
公告ID: KylinSec-SA-2022-1690
发布日期: 2022年7月30日
关联CVE: CVE-2018-10892
The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host s hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2018-10892 | KY3.4-4A | docker | Unaffected |
| CVE-2018-10892 | KY3.4-5 | docker | Unaffected |
| CVE-2018-10892 | KY3.5.1 | docker | Unaffected |
