Known vulnerabilities in docker.io (Debian package)

Vendor: Debian

Software: docker.io (Debian package)

Software CPE: cpe:2.3:o:debian:docker_io_debian_package:*:*:*:*:*:debian_linux:*:*

Website: https://www.debian.org/

Total vulnerabilities: 8

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU50273 - Permissions, Privileges, and Access Controls CVE-2021-21284	CWE-264	Medium	No	No	18.09.1+dfsg1-7.1+deb10u3	02.02.2021	SB2021020305 SB2021020611 SB2021020922 and 9 more
#VU50274 - Resource exhaustion CVE-2021-21285	CWE-400	Medium	No	No	18.09.1+dfsg1-7.1+deb10u3	02.02.2021	SB2021020305 SB2021020611 SB2021020923 and 9 more
#VU48795 - Improper Access Control CVE-2020-15257	CWE-284	Medium	Available	No	18.09.1+dfsg1-7.1+deb10u3	01.12.2020	SB2020120606 SB2020120609 SB2020120715 and 10 more
#VU48721 - Insufficiently Protected Credentials CVE-2020-15157	CWE-522	Medium	No	No	18.09.1+dfsg1-7.1+deb10u3	16.10.2020	SB2020101613 SB2020112014 SB2021022805 and 5 more
#VU28556 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2020-13401	CWE-451	Medium	Available	No	18.09.1+dfsg1-7.1+deb10u2, 19.03.12+dfsg1-1	03.06.2020	SB2020060335 SB2020060336 SB2020062305 and 7 more
#VU20969 - Uncontrolled Search Path Element CVE-2019-14271	CWE-427	Medium	Available	No	18.09.1+dfsg1-7.1+deb10u1	10.09.2019	SB2019091012 SB2019072625 SB2023051608
#VU20954 - Command injection CVE-2019-13139	CWE-77	Low	No	No	18.09.1+dfsg1-7.1+deb10u1	10.09.2019	SB2019091002 SB2019091012 SB2019110702
#VU19390 - Information Exposure Through Log Files CVE-2019-13509	CWE-532	Medium	No	No	18.09.1+dfsg1-7.1+deb10u1	26.07.2019	SB2019091012 SB2019110702 SB2019121201 and 7 more