CVE-2021-21285mediumCWE-400

CVE-2021-21285: medium-severity vulnerability in moby

Docker daemon crash during image pull of malicious image

Published · Updated

Follow this CVE+ Monitor moby+ Monitor docker.io

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 3.3%
In short

A specially crafted Docker image manifest can crash the Docker daemon when pulled, disrupting container operations on the affected system.

Technical detail

The dockerd daemon fails to properly validate malformed image manifests during pull operations, allowing an attacker to trigger a denial-of-service condition. The vulnerability requires the ability to distribute or host a malicious image manifest that the daemon will attempt to pull, resulting in daemon termination.

Summary generated and translated by AI from the official description.
In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
moby · moby
Related CVEs — moby

In the same product, most dangerous first.

CVE-2024-41110CRITICALMoby authz zero length regressionEPSS 16.5%CVE-2026-34040HIGHMoby: AuthZ plugin bypass with oversized request bodyEPSS 9.3%CVE-2021-41091MEDIUMInsufficiently restricted permissions on data directory in Docker EngineEPSS 2.8%CVE-2023-28840HIGHmoby/moby's dockerd daemon encrypted overlay network may be unauthenticatedEPSS 2.6%CVE-2023-28842MEDIUMmoby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticatedEPSS 1.4%CVE-2021-21284MEDIUMprivilege escalation in MobyEPSS 1.1%