Date: Mon, 5 Sep 2016 16:26:02 -0700 From: Diogo Mónica <diogo.monica@...ker.com> To: oss-security <oss-security@...ts.openwall.com> Subject: cve request: docker swarm node Dos occurs when join a cluster failed using local CA certificate >From I can understand from this report, the author creates a swarm, messes with the local certificate for a worker, and then tries to join the swarm. The worker fails because the author messed with the local state. This does not make the manager not available to the rest of the worker nodes, and is essentially a self-DoS (I modified my local configuration in such a way that docker doesn't run). A simple rm -rf /var/lib/docker/swarm should clean all the state. Not CVE worthy. -- Diogo Mónica
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.