Files
linuxkit/docs/security-events.md
Tycho Andersen 12624b60bf add some headings, fix some spelling mistakes
Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-04-01 11:32:41 -06:00

14 lines
427 B
Markdown

# Moby Security Events
The incomplete list below is an assessment of some CVEs, and Moby's resilience
(or not) to them.
### Bugs mitigated:
* [CVE-2017-2636](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2636)
([exploit post](https://a13xp0p0v.github.io/2017/03/24/CVE-2017-2636.html)):
This CVE requires `CONFIG_N_HDLC={y|m}`, which Moby does not specify, and so
is not vulnerable.
### Bugs not mitigated: