CVE-2020-29389: Critical severity docker vulnerability
The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed by affected versions of the Docker image may allow an attacker to achieve root access with a blank password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-29389?
CVE-2020-29389 is considered a high severity vulnerability due to the potential for an attacker to gain root access.
How do I mitigate CVE-2020-29389?
To mitigate CVE-2020-29389, users should change the root password to a strong, non-blank value after deploying the Docker image.
Which versions of Docker Crux Linux are affected by CVE-2020-29389?
CVE-2020-29389 affects Docker Crux Linux images from versions 3.0 to 3.4.
Can CVE-2020-29389 compromise my system?
Yes, CVE-2020-29389 can compromise your system by allowing an attacker to access it with root privileges.
What should I do if I have deployed a vulnerable version of the Crux Linux Docker image?
If you have deployed a vulnerable version, immediately change the root password and consider updating to a newer, secure version of the Docker image.