CVE-2017-14992MediumCVSS 6.5

Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0 1.10.3 17.03.0 17.03.1 17.03.2 17.06.0 17.06.1 17.06.2 17.09.0 and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload aka gzip bombing.

Published
June 2, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2017-14992 →