util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially
    unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
    (CVE-2020-27534)

An update of the telegraf package has been released.

An update of the kapacitor package has been released.

ID	Name	Product	Family	Severity
411480	SCA: security update for github.com/docker/docker, github.com/moby/moby (GHSA-6hwg-w5jg-9c6x)	Tenable Cloud Security	SCA Checks	medium
411480	SCA: security update for github.com/docker/docker, github.com/moby/moby (GHSA-6hwg-w5jg-9c6x)	Tenable Self-Hosted Container Security	SCA Checks	medium
204388	Photon OS 5.0: Telegraf PHSA-2023-5.0-0041	Nessus	PhotonOS Local Security Checks	high
204224	Photon OS 5.0: Kapacitor PHSA-2023-5.0-0045	Nessus	PhotonOS Local Security Checks	critical

Detections

Analytics

CVE-2020-27534

medium

Tenable Plugins

medium

medium

high

critical