Vulnerability Details : CVE-2016-6595
The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of cluster joins) via a long sequence of join and quit actions. NOTE: the vendor disputes this issue, stating that this sequence is not "removing the state that is left by old nodes. At some point the manager obviously stops being able to accept new nodes, since it runs out of memory. Given that both for Docker swarm and for Docker Swarmkit nodes are *required* to provide a secret token (it's actually the only mode of operation), this means that no adversary can simply join nodes and exhaust manager resources. We can't do anything about a manager running out of memory and not being able to add new legitimate nodes to the system. This is merely a resource provisioning issue, and definitely not a CVE worthy vulnerability.
Vulnerability category: Denial of service
Products affected by CVE-2016-6595
- cpe:2.3:a:docker:docker:1.12.0:*:*:*:*:*:*:*
Threat overview for CVE-2016-6595
Top countries where our scanners detected CVE-2016-6595
Top open port discovered on systems with this issue
2375
IPs affected by CVE-2016-6595 15
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2016-6595!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2016-6595
0.62%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 79 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-6595
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:N/A:P |
8.0
|
2.9
|
NIST | |
6.5
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
2.8
|
3.6
|
NIST |
CWE ids for CVE-2016-6595
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-6595
-
http://www.openwall.com/lists/oss-security/2016/09/02/8
oss-security - Re: Re: cve request: docker swarmkit Dos occurs by repeatly joining and quitting swam cluster as a nodeThird Party Advisory
-
http://www.openwall.com/lists/oss-security/2016/09/02/1
oss-security - Re: cve request: docker swarmkit Dos occurs by repeatly joining and quitting swam cluster as a nodeThird Party Advisory
-
http://www.securitytracker.com/id/1036548
Docker Unspecified Flaw Lets Remote Authenticated Users Deny Service on the Target Swarm Cluster - SecurityTracker
-
http://www.openwall.com/lists/oss-security/2016/08/04/1
oss-security - Re: cve request: docker swarmkit Dos occurs by repeatly joining and quitting swam cluster as a nodeThird Party Advisory
-
http://www.securityfocus.com/bid/92195
Docker Swarmkit Local Denial of Service Vulnerability
Jump to