| Advisory
Products
MOOLE SCA
Continuous visibility into open-source risk
MOOLE Container Security
End-to-end container defense across the SDLC
MOOLE SAST
Static application security testing for source code
About Us
CVE-2019-1020014
Vulnerability Database
CVE-2019-1020014
Base Score
MEDIUM
5.5
CVE-2019-1020014
docker-credential-helpers before 0.6.3 has a double free in the List functions.
Vector
LOCAL
Published By
josh@bress.net
Published Date
Jul 29, 2019, 13:15
Weakness Type (CWE)
:
CWE-415
CVSS Metrics
CVSS v3.1
CVSS v2
Base Score
5.5
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Severity
MEDIUM
Version
3.1
Attack Vector (AV)
LOCAL
Attack Complexity (AC)
LOW
Privileges Required (PR)
LOW
User Interaction (UI)
NONE
Scope (S)
UNCHANGED
Confidentiality (C)
HIGH
Integrity (I)
NONE
Availability (A)
NONE
References
https://github.com/docker/docker-credential-helpers/commit/1c9f7ede70a5ab9851f4c9cb37d317fd89cd318a
https://github.com/docker/docker-credential-helpers/releases/tag/v0.6.3
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6VVFB6UWUK2GQQN7DVUU6GRRAL637A73/
https://usn.ubuntu.com/4103-1/
https://usn.ubuntu.com/4103-2/
Base Score
MEDIUM
5.5
Weakness Type (CWE)
:
CWE-415
CVSS Metrics
CVSS v3.1
CVSS v2
Base Score
5.5
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Severity
MEDIUM
Version
3.1
Attack Vector (AV)
LOCAL
Attack Complexity (AC)
LOW
Privileges Required (PR)
LOW
User Interaction (UI)
NONE
Scope (S)
UNCHANGED
Confidentiality (C)
HIGH
Integrity (I)
NONE
Availability (A)
NONE
