Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2021-41091— Insufficiently restricted permissions on data directory in Docker Engine

Quick assessment

Affected
moby moby
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Moby是一个开源项目，旨在推动软件的容器化，并帮助生态系统使容器技术主流化。 Moby 存在安全漏洞，该漏洞源于在Moby (Docker Engine)中发现了一个bug，数据目录(通常是var lib Docker )包含的子目录权限没有受到足够的限制，允许没有特权的Linux用户遍历目录内容和执行程序。攻击者可利用该漏洞当容器包含具有扩展权限位(如setuid )的可执行程序时，没有特权的Linux用户可以发现并执行这些程序。

CVSS 6.3 · Medium EPSS 2.85% · P86
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-41091

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Insufficiently restricted permissions on data directory in Docker Engine
Source: CVE Program / CVE List V5
Vulnerability Description
Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as `setuid`), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers should be stopped and restarted for the permissions to be fixed. For users unable to upgrade limit access to the host to trusted users. Limit access to host volumes to trusted containers.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
权限预留不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Moby 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Moby是一个开源项目，旨在推动软件的容器化，并帮助生态系统使容器技术主流化。 Moby 存在安全漏洞，该漏洞源于在Moby (Docker Engine)中发现了一个bug，数据目录(通常是var lib Docker )包含的子目录权限没有受到足够的限制，允许没有特权的Linux用户遍历目录内容和执行程序。攻击者可利用该漏洞当容器包含具有扩展权限位(如setuid )的可执行程序时，没有特权的Linux用户可以发现并执行这些程序。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
moby moby < 20.10.9 -

II. Public POCs for CVE-2021-41091

# POC Description Source Link Shenlong Link
1 POC for CVE-2021-41091 https://github.com/UncleJ4ck/CVE-2021-41091 POC Details
2 None https://github.com/jrbH4CK/CVE-2021-41091 POC Details
3 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. https://github.com/SNE-M23-SN/Vulnerable-Docker-Engine POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-41091

请登录查看更多情报信息。

Patches & Fixes for CVE-2021-41091 (1)

Vendor Advisories for CVE-2021-41091 (2)

Mailing List Discussions for CVE-2021-41091 (2)

IV. Related Vulnerabilities

Same product: moby
Same vendor: moby
Same weakness: CWE-281

V. Comments for CVE-2021-41091

No comments yet

Leave a comment