/
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-3jqx-m5x7-q8mq

Published

Last updated

https://images.chainguard.dev/security/CGA-3jqx-m5x7-q8mq
Package

docker-machine-driver-harvester

RepositoryWolfi
Latest Update
Pending upstream fix
Aliases
  • CVE-2021-21285
  • GHSA-6fj5-m822-rqx8

Severity

Unknown

Summary

moby docker daemon crash during image pull of malicious image

Description

Impact

Pulling an intentionally malformed Docker image manifest crashes the dockerd daemon.

Patches

Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.

Credits

Maintainers would like to thank Josh Larsen, Ian Coldwater, Duffie Cooley, Rory McCune for working on the vulnerability and Brad Geesaman for responsibly disclosing it to security@docker.com.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs