CVE-2018-11757

State: Published
Severity: Not scored
Published: Jul 23, 2018
Updated: Sep 16, 2024
Reserved: Jun 5, 2018

Description

In Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag openwhisk/dockerskeleton:1.3.0 (or earlier) may allow an attacker to replace the user function inside the container if the user code is vulnerable to code exploitation.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Docker Skeleton Runtime for Apache OpenWhiskApache Software Foundation	Docker tag openwhisk/dockerskeleton 1.3.0 (or lower)Affected

References

104913vdb-entry
[openwhisk-dev] 20180720 [CVE] CVE-2018-11757 Docker Skeleton Runtime for Apache OpenWhiskmailing-list
https://github.com/apache/incubator-openwhisk-runtime-docker/commit/891896f25c39bc336ef6dda53f80f466ac4ca3c8

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.