VulnerabilitycriticalExploited in the wild

Researchers find hidden vulnerabilities in hundreds of Docker containers

Help Net Securityby @helpnetsecurityFeb 23, 2023 · 00:00 UTC (Feb 23, 2023)2 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2021-42013 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-42013 CVE-2021-41773 CVE-2019-17558

Tags: cve-2021-42013 cve-2021-41773 cve-2019-17558 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-17558	Remote Code Execution via VelocityResponseWriter plug-in in Apache Solr 5.0–8.3.1	7.5	99%	KEVPoC ×4	Dec 30, 2019 KEV Nov 3, 2021
CVE-2021-41773	Path Traversal to RCE in Apache HTTP Server 2.4.49	9.8	100%	KEVRansomwarePoC ×6	Oct 5, 2021 KEV Nov 3, 2021
CVE-2021-42013	Path Traversal and RCE in Apache HTTP Server (follow-up to CVE-2021-41773)	9.8	100%	KEVRansomwarePoC ×6	Oct 7, 2021 KEV Nov 3, 2021

From the original article

2 min read at helpnetsecurity.com

Rezilion uncovered the presence of hundreds of Docker container images containing vulnerabilities that are not detected by most standard vulnerability scanners and SCA tools. The research revealed numerous high-severity/critical vulnerabilities hidden in hundreds of popular container images, downloaded billions of times collectively. This includes high-profile vulnerabilities with publicly known exploits.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.