Back to Database
Status published
Medium
CVE-2018-20699
Docker Engine before 18.09 allows attackers to cause a denial...
Vulnerability Description
Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems or --cpuset-cpus value, related to daemon/daemon_unix.go, pkg/parsers/parsers.go, and pkg/sysinfo/sysinfo.go.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-20699
Credits & Attribution
No credits recorded in the NVD database.
References
More from docker
View All →CVE-2025-64443
DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode
High
7.3
CVE-2025-62725
Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
High
8.9
CVE-2025-0495
Secrets leakage to telemetry endpoint via cache backend configuration via buildx
Medium
4.1
CVE-2022-38730
Docker Desktop for Windows before 4.6 allows attackers to overwrite...
Unknown
0
CVE-2022-37326
Docker Desktop for Windows before 4.6.0 allows attackers to delete...
Unknown
0
Affected Vendor
docker
View all reports →Affected Software
engine, enterprise linux server
Vulnerable Versions:
0, 7.0
Timeline
Official Publish:
January 12th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.