CVE:CVE-2019-10214
CNNVD:CNNVD-201909-473
containers image是一款允许应用程序从容器映像注册表中提取和推送映像的Go语言库。
containers image库存在安全漏洞。攻击者可利用该漏洞实施MiTM攻击和窃取登录凭证。
solution:Upgrade buildah_project buildah to a higher version than -; Upgrade libpod_project libpod to a higher version than -; Upgrade redhat openshift_container_platform to a higher version than 4.1,and avoid the version 4.1; Upgrade skopeo_project skopeo to a higher version than -; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1