CVE-2018-20699
Fixed in a distro release EPSS 2%
Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems or --cpuset-cpus value, related to daemon/daemon_unix.go, pkg/parsers/parsers.go, and pkg/sysinfo/sysinfo.go.
Products: docker engine, redhat enterprise_linux_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | auditbeat-7 | 7.17.28-r3 |
| Chainguard | auditbeat-7-oci-entrypoint | 7.17.28-r3 |
| Chainguard | auditbeat-fips-7 | 7.17.28-r5 |
| Chainguard | beats-7 | 7.17.28-r3 |
| Chainguard | beats-fips-7 | 7.17.28-r5 |
| Chainguard | filebeat-7 | 7.17.28-r3 |
| Chainguard | filebeat-7-oci-entrypoint | 7.17.28-r3 |
| Chainguard | filebeat-fips-7 | 7.17.28-r5 |
| Chainguard | gitness | 0 |
| Chainguard | heartbeat-7 | 7.17.28-r3 |
| Chainguard | heartbeat-7-oci-entrypoint | 7.17.28-r3 |
| Chainguard | heartbeat-fips-7 | 7.17.28-r5 |
| Chainguard | heartbeat-fips-7-oci-entrypoint | 7.17.28-r5 |
| Chainguard | metricbeat-7 | 7.17.28-r3 |
| Chainguard | metricbeat-7-oci-entrypoint | 7.17.28-r3 |
| Chainguard | metricbeat-fips-7 | 7.17.28-r5 |
| Debian 12 | docker.io | 18.09.1+dfsg1-2 |
| Debian 13 | docker.io | 18.09.1+dfsg1-2 |
| Debian 14 | docker.io | 18.09.1+dfsg1-2 |
| Red Hat rhel extras other 7 | docker | 2:1.13.1-94.gitb2f74b2.el7 |
| Red Hat rhel extras other 7 | docker-client | 2:1.13.1-94.gitb2f74b2.el7 |
| Red Hat rhel extras other 7 | docker-common | 2:1.13.1-94.gitb2f74b2.el7 |
| Red Hat rhel extras other 7 | docker-debuginfo | 2:1.13.1-94.gitb2f74b2.el7 |
| Red Hat rhel extras other 7 | docker-logrotate | 2:1.13.1-94.gitb2f74b2.el7 |
| Red Hat rhel extras other 7 | docker-lvm-plugin | 2:1.13.1-94.gitb2f74b2.el7 |
| Red Hat rhel extras other 7 | docker-novolume-plugin | 2:1.13.1-94.gitb2f74b2.el7 |
| Red Hat rhel extras other 7 | docker-rhel-push-plugin | 2:1.13.1-94.gitb2f74b2.el7 |
| Red Hat rhel extras other 7 | docker-v1.10-migrator | 2:1.13.1-94.gitb2f74b2.el7 |
| SUSE Enterprise Storage 7.1 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 15 SP6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 15 SP7 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| Ubuntu 16.04 LTS | docker.io | 18.09.2-0ubuntu1~16.04.1 |
| Ubuntu 18.04 LTS | docker.io | 18.09.2-0ubuntu1~18.04.1 |
| Wolfi | gitness | 0 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| openSUSE Tumbleweed | docker | 20.10.6_ce-2.1 |
| openSUSE Tumbleweed | docker-stable | 24.0.9_ce-15.1 |