Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems or --cpuset-cpus value, related to daemon/daemon_unix.go, pkg/parsers/parsers.go, and pkg/sysinfo/sysinfo.go.
{ "availability": "No subscription required", "ubuntu_priority": "negligible", "binaries": [ { "docker-doc": "18.09.2-0ubuntu1~16.04.1", "docker.io": "18.09.2-0ubuntu1~16.04.1", "golang-github-docker-docker-dev": "18.09.2-0ubuntu1~16.04.1", "golang-docker-dev": "18.09.2-0ubuntu1~16.04.1", "vim-syntax-docker": "18.09.2-0ubuntu1~16.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "negligible", "binaries": [ { "docker-doc": "18.09.2-0ubuntu1~18.04.1", "docker.io": "18.09.2-0ubuntu1~18.04.1", "golang-github-docker-docker-dev": "18.09.2-0ubuntu1~18.04.1", "golang-docker-dev": "18.09.2-0ubuntu1~18.04.1", "vim-syntax-docker": "18.09.2-0ubuntu1~18.04.1" } ] }