The version of docker installed on the remote host is prior to 20.10.7-3.71. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1537 advisory.

    A bug was found in Moby (Docker Engine) where attempting to copy files using docker cp into a specially-     crafted container can result in Unix file permission changes for existing files in the host 2019s     filesystem, widening access to others. This bug does not directly allow files to be read, modified, or     executed without an additional cooperating process. (CVE-2021-41089)

    A bug was found in Moby (Docker Engine) where the data directory (typically /var/lib/docker) contained     subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to     traverse directory contents and execute programs. When containers included executable programs with     extended permission bits (such as setuid), unprivileged Linux users could discover and execute those     programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group     inside a container, the unprivileged Linux user on the host could discover, read, and modify those files.
    (CVE-2021-41091)

    A bug was found in the Docker CLI where running docker login my-private-registry.example.com with a     misconfigured configuration file (typically ~/.docker/config.json) listing a credsStore or credHelpers     that could not be executed would result in any provided credentials being sent to registry-1.docker.io     rather than the intended private registry. (CVE-2021-41092)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux AMI : docker (ALAS-2021-1537)

high Nessus Plugin ID 153861

Version 1.5

Version 1.4

Version 1.5 Dec 12, 2024, 9:55 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202412120955
Version 1.4 Nov 29, 2023, 3:21 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202311291521