CVE-2016-6595

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-6595
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6595.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-6595
Published
2017-01-04T20:59:00.247Z
Modified
2026-08-27T08:18:24.063301Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of cluster joins) via a long sequence of join and quit actions. NOTE: the vendor disputes this issue, stating that this sequence is not "removing the state that is left by old nodes. At some point the manager obviously stops being able to accept new nodes, since it runs out of memory. Given that both for Docker swarm and for Docker Swarmkit nodes are required to provide a secret token (it's actually the only mode of operation), this means that no adversary can simply join nodes and exhaust manager resources. We can't do anything about a manager running out of memory and not being able to add new legitimate nodes to the system. This is merely a resource provisioning issue, and definitely not a CVE worthy vulnerability.

References

Affected packages

Git / github.com/docker-archive/engine

Affected ranges

Type
GIT
Repo
https://github.com/docker-archive/engine
Events
Introduced
8eab29edd820017901796eb60d4bea28d760f16f
Last affected
8eab29edd820017901796eb60d4bea28d760f16f
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:docker:docker:1.12.0:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "1.12.0"
        },
        {
            "last_affected": "1.12.0"
        }
    ]
}

Affected versions

1.*
1.12.0
v1.*
v1.12.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6595.json"

Git / github.com/moby/moby

Affected ranges

Type
GIT
Repo
https://github.com/moby/moby
Events
Introduced
8eab29edd820017901796eb60d4bea28d760f16f
Last affected
8eab29edd820017901796eb60d4bea28d760f16f
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:docker:docker:1.12.0:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "1.12.0"
        },
        {
            "last_affected": "1.12.0"
        }
    ]
}

Affected versions

1.*
1.12.0
v1.*
v1.12.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6595.json"