CVE-2020-27534
Fixed in a distro release EPSS 2%
util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
Products: docker
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/docker/docker | 19.03.9 |
| Go | github.com/moby/moby | 19.03.9 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | docker-config-mirror-gcr | 0 |
| Chainguard | docker-dind | 0 |
| Chainguard | docker-machine-driver-harvester | 1.0.4-r1 |
| Chainguard | docker-machine-driver-harvester | 1.0.5-r0 |
| Chainguard | py3-docker | 0 |
| Chainguard | py3.10-docker | 0 |
| Chainguard | py3.11-docker | 0 |
| Chainguard | py3.12-docker | 0 |
| Chainguard | py3.13-docker | 0 |
| Chainguard | rancher-machine | 0.15.0.137-r0 |
| Wolfi | docker-config-mirror-gcr | 0 |
| Wolfi | docker-dind | 0 |
| Wolfi | docker-machine-driver-harvester | 1.0.4-r1 |
| Wolfi | docker-machine-driver-harvester | 1.0.5-r0 |
| Wolfi | py3-docker | 0 |
| Wolfi | py3.10-docker | 0 |
| Wolfi | py3.11-docker | 0 |
| Wolfi | py3.12-docker | 0 |
| Wolfi | py3.13-docker | 0 |
| Wolfi | rancher-machine | 0.15.0.137-r0 |