CVE-2021-21285

Fixed in a distro release EPSS 3%CVSS 6.5

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.

Published 2021-02-02 · CVE record · OSV

Products: moby

Fixed upstream

Ecosystem	Package	Fixed in
Go	github.com/moby/moby	19.3.15
Go	github.com/moby/moby	20.10.3

Distro releases

Release	Package	Fixed in
Arch Linux	docker	1:20.10.3-1
Chainguard	docker-machine-driver-harvester	1.0.4-r1
Chainguard	docker-machine-driver-harvester	1.0.5-r0
Chainguard	py3-docker	0
Chainguard	py3.10-docker	0
Chainguard	py3.11-docker	0
Chainguard	py3.12-docker	0
Chainguard	py3.13-docker	0
Chainguard	rancher-machine	0.15.0.137-r0
Debian 10	docker.io	18.09.1+dfsg1-7.1+deb10u3
Debian 12	docker.io	20.10.3+dfsg1-1
Debian 13	docker.io	20.10.3+dfsg1-1
Debian 14	docker.io	20.10.3+dfsg1-1
SUSE Enterprise Storage 6	containerd	1.4.4-5.32.1
SUSE Enterprise Storage 6	containerd	1.3.9-5.29.3
SUSE Enterprise Storage 6	docker	20.10.6_ce-6.49.3
SUSE Enterprise Storage 6	docker	19.03.15_ce-6.43.3
SUSE Enterprise Storage 6	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-6.45.3
SUSE Enterprise Storage 6	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-4.28.3
SUSE Enterprise Storage 6	runc	1.0.0~rc93-1.14.2
SUSE Enterprise Storage 7	runc	1.0.0~rc93-1.14.2
SUSE Enterprise Storage 7.1	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	containerd	1.3.9-5.29.3
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	containerd	1.4.4-5.32.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	docker	19.03.15_ce-6.43.3
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-6.45.3
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-4.28.3
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	containerd	1.3.9-5.29.3
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	containerd	1.4.4-5.32.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	docker	19.03.15_ce-6.43.3
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-6.45.3
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-4.28.3
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS	containerd	1.4.4-5.32.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise High Performance Computing 15-ESPOS	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise High Performance Computing 15-LTSS	containerd	1.4.4-5.32.1
SUSE Linux Enterprise High Performance Computing 15-LTSS	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise High Performance Computing 15-LTSS	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise Micro 5.0	containerd	1.4.4-5.32.1
SUSE Linux Enterprise Micro 5.0	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise Micro 5.0	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise Module for Containers 12	containerd	1.4.4-16.38.1
SUSE Linux Enterprise Module for Containers 12	containerd	1.3.9-16.35.1
SUSE Linux Enterprise Module for Containers 12	docker	20.10.6_ce-98.66.1
SUSE Linux Enterprise Module for Containers 12	docker	19.03.15_ce-98.60.2
SUSE Linux Enterprise Module for Containers 12	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-1.52.1
SUSE Linux Enterprise Module for Containers 12	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-37.1
SUSE Linux Enterprise Module for Containers 12	runc	1.0.0~rc93-16.8.1
SUSE Linux Enterprise Module for Containers 15 SP2	containerd	1.4.4-5.32.1
SUSE Linux Enterprise Module for Containers 15 SP2	containerd	1.3.9-5.29.3
SUSE Linux Enterprise Module for Containers 15 SP2	docker	19.03.15_ce-6.43.3
SUSE Linux Enterprise Module for Containers 15 SP2	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise Module for Containers 15 SP2	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-6.45.3
SUSE Linux Enterprise Module for Containers 15 SP2	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-4.28.3
SUSE Linux Enterprise Module for Containers 15 SP2	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise Module for Containers 15 SP3	containerd	1.4.4-5.32.1
SUSE Linux Enterprise Module for Containers 15 SP3	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise Module for Containers 15 SP3	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise Module for Containers 15 SP6	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise Module for Containers 15 SP7	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise Server 12 SP5-LTSS	docker-stable	24.0.9_ce-1.20.1
SUSE Linux Enterprise Server 15 SP1-BCL	containerd	1.3.9-5.29.3
SUSE Linux Enterprise Server 15 SP1-BCL	containerd	1.4.4-5.32.1
SUSE Linux Enterprise Server 15 SP1-BCL	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise Server 15 SP1-BCL	docker	19.03.15_ce-6.43.3
SUSE Linux Enterprise Server 15 SP1-BCL	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-6.45.3
SUSE Linux Enterprise Server 15 SP1-BCL	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-4.28.3
SUSE Linux Enterprise Server 15 SP1-BCL	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise Server 15 SP1-LTSS	containerd	1.3.9-5.29.3
SUSE Linux Enterprise Server 15 SP1-LTSS	containerd	1.4.4-5.32.1
SUSE Linux Enterprise Server 15 SP1-LTSS	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise Server 15 SP1-LTSS	docker	19.03.15_ce-6.43.3
SUSE Linux Enterprise Server 15 SP1-LTSS	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-6.45.3
SUSE Linux Enterprise Server 15 SP1-LTSS	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-4.28.3
SUSE Linux Enterprise Server 15 SP1-LTSS	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise Server 15 SP3-LTSS	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise Server 15 SP4-LTSS	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise Server 15 SP5-LTSS	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise Server 15-LTSS	containerd	1.4.4-5.32.1
SUSE Linux Enterprise Server 15-LTSS	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise Server 15-LTSS	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5	docker-stable	24.0.9_ce-1.20.1
SUSE Linux Enterprise Server for SAP Applications 15	containerd	1.4.4-5.32.1
SUSE Linux Enterprise Server for SAP Applications 15	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise Server for SAP Applications 15	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise Server for SAP Applications 15 SP1	containerd	1.4.4-5.32.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1	containerd	1.3.9-5.29.3
SUSE Linux Enterprise Server for SAP Applications 15 SP1	docker	19.03.15_ce-6.43.3
SUSE Linux Enterprise Server for SAP Applications 15 SP1	docker	20.10.6_ce-6.49.3
SUSE Linux Enterprise Server for SAP Applications 15 SP1	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-6.45.3
SUSE Linux Enterprise Server for SAP Applications 15 SP1	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-4.28.3
SUSE Linux Enterprise Server for SAP Applications 15 SP1	runc	1.0.0~rc93-1.14.2
SUSE Linux Enterprise Server for SAP Applications 15 SP3	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5	docker-stable	24.0.9_ce-150000.1.25.1
SUSE Manager Proxy 4.0	containerd	1.3.9-5.29.3
SUSE Manager Proxy 4.0	containerd	1.4.4-5.32.1
SUSE Manager Proxy 4.0	docker	19.03.15_ce-6.43.3
SUSE Manager Proxy 4.0	docker	20.10.6_ce-6.49.3
SUSE Manager Proxy 4.0	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-6.45.3
SUSE Manager Proxy 4.0	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-4.28.3
SUSE Manager Proxy 4.0	runc	1.0.0~rc93-1.14.2
SUSE Manager Retail Branch Server 4.0	containerd	1.4.4-5.32.1
SUSE Manager Retail Branch Server 4.0	containerd	1.3.9-5.29.3
SUSE Manager Retail Branch Server 4.0	docker	20.10.6_ce-6.49.3
SUSE Manager Retail Branch Server 4.0	docker	19.03.15_ce-6.43.3
SUSE Manager Retail Branch Server 4.0	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-6.45.3
SUSE Manager Retail Branch Server 4.0	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-4.28.3
SUSE Manager Retail Branch Server 4.0	runc	1.0.0~rc93-1.14.2
SUSE Manager Server 4.0	containerd	1.3.9-5.29.3
SUSE Manager Server 4.0	containerd	1.4.4-5.32.1
SUSE Manager Server 4.0	docker	20.10.6_ce-6.49.3
SUSE Manager Server 4.0	docker	19.03.15_ce-6.43.3
SUSE Manager Server 4.0	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-6.45.3
SUSE Manager Server 4.0	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-4.28.3
SUSE Manager Server 4.0	runc	1.0.0~rc93-1.14.2
Ubuntu 18.04 LTS	docker.io	20.10.7-0ubuntu1~18.04.1
Ubuntu 20.04 LTS	docker.io	20.10.7-0ubuntu1~20.04.1
Ubuntu Pro 16.04 LTS	docker.io	no fix
Wolfi	docker-machine-driver-harvester	1.0.4-r1
Wolfi	docker-machine-driver-harvester	1.0.5-r0
Wolfi	py3-docker	0
Wolfi	py3.10-docker	0
Wolfi	py3.11-docker	0
Wolfi	py3.12-docker	0
Wolfi	py3.13-docker	0
Wolfi	rancher-machine	0.15.0.137-r0
openSUSE Leap 15.2	containerd	1.3.9-lp152.2.3.1
openSUSE Leap 15.2	containerd	1.4.4-lp152.2.6.1
openSUSE Leap 15.2	docker	19.03.15_ce-lp152.2.3.1
openSUSE Leap 15.2	docker	20.10.6_ce-lp152.2.12.1
openSUSE Leap 15.2	docker-runc	1.0.0rc10+gitr3981_dc9208a3303f-lp152.2.3.1
openSUSE Leap 15.2	fish	2.7.1-lp152.5.3.1
openSUSE Leap 15.2	golang-github-docker-libnetwork	0.7.0.1+gitr2908_55e924b8a842-lp152.2.3.1
openSUSE Leap 15.2	runc	1.0.0~rc93-lp152.2.3.1
openSUSE Leap 15.3	containerd	1.4.4-5.32.1
openSUSE Leap 15.3	docker	20.10.6_ce-6.49.3
openSUSE Leap 15.3	runc	1.0.0~rc93-1.14.2
openSUSE Leap 15.6	docker-stable	24.0.9_ce-150000.1.25.1