UBUNTU-CVE-2019-1020014
- Source
- https://ubuntu.com/security/CVE-2019-1020014
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-1020014.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2019-1020014
- Upstream
- Downstream
- Related
- Published
- 2019-07-29T00:00:00Z
- Modified
- 2025-09-08T16:45:52Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Ubuntu - low
- Summary
- [none]
- Details
-
docker-credential-helpers before 0.6.3 has a double free in the List functions.
- References
-
- https://ubuntu.com/security/CVE-2019-1020014
- https://github.com/docker/docker-credential-helpers/releases/tag/v0.6.3
- https://ubuntu.com/security/notices/USN-4103-1
- https://ubuntu.com/security/notices/USN-4103-2
- https://ubuntu.com/security/notices/USN-4856-1
- https://www.cve.org/CVERecord?id=CVE-2019-1020014
Affected packages
Ubuntu:16.04:LTS / docker.io
Package
- Name
- docker.io
- Purl
- pkg:deb/ubuntu/docker.io@18.09.7-0ubuntu1~16.04.5?arch=source&distro=xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed18.09.7-0ubuntu1~16.04.5
Affected versions
1.*
1.6.2~dfsg1-1ubuntu4
1.10.2-0ubuntu3
1.10.2-0ubuntu4
1.10.3-0ubuntu1
1.10.3-0ubuntu4
1.10.3-0ubuntu5
1.10.3-0ubuntu6
1.11.2-0ubuntu5~16.04
1.12.1-0ubuntu13~16.04.1
1.12.3-0ubuntu4~16.04.2
1.12.6-0ubuntu1~16.04.1
1.13.1-0ubuntu1~16.04.2
17.*
17.03.2-0ubuntu2~16.04.1
18.*
18.06.1-0ubuntu1~16.04.2
18.06.1-0ubuntu1.2~16.04.1
18.09.2-0ubuntu1~16.04.1
18.09.5-0ubuntu1~16.04.2
18.09.7-0ubuntu1~16.04.1
18.09.7-0ubuntu1~16.04.4
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "docker.io",
"binary_version": "18.09.7-0ubuntu1~16.04.5"
},
{
"binary_name": "golang-docker-dev",
"binary_version": "18.09.7-0ubuntu1~16.04.5"
},
{
"binary_name": "golang-github-docker-docker-dev",
"binary_version": "18.09.7-0ubuntu1~16.04.5"
},
{
"binary_name": "vim-syntax-docker",
"binary_version": "18.09.7-0ubuntu1~16.04.5"
}
]
}
Ubuntu:18.04:LTS / docker.io
Package
- Name
- docker.io
- Purl
- pkg:deb/ubuntu/docker.io@18.09.7-0ubuntu1~18.04.4?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed18.09.7-0ubuntu1~18.04.4
Affected versions
1.*
1.13.1-0ubuntu6
17.*
17.03.2-0ubuntu1
17.03.2-0ubuntu3
17.03.2-0ubuntu5
17.12.1-0ubuntu1
18.*
18.06.1-0ubuntu1~18.04.1
18.06.1-0ubuntu1.2~18.04.1
18.09.2-0ubuntu1~18.04.1
18.09.5-0ubuntu1~18.04.2
18.09.7-0ubuntu1~18.04.1
18.09.7-0ubuntu1~18.04.3
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "docker.io",
"binary_version": "18.09.7-0ubuntu1~18.04.4"
},
{
"binary_name": "golang-docker-dev",
"binary_version": "18.09.7-0ubuntu1~18.04.4"
},
{
"binary_name": "golang-github-docker-docker-dev",
"binary_version": "18.09.7-0ubuntu1~18.04.4"
},
{
"binary_name": "vim-syntax-docker",
"binary_version": "18.09.7-0ubuntu1~18.04.4"
}
]
}
Ubuntu:Pro:18.04:LTS / golang-github-docker-docker-credential-helpers
Package
- Name
- golang-github-docker-docker-credential-helpers
- Purl
- pkg:deb/ubuntu/golang-github-docker-docker-credential-helpers@0.5.0-2ubuntu0.1+esm1?arch=source&distro=esm-apps/bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed0.5.0-2ubuntu0.1+esm1
Ecosystem specific
{
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "golang-docker-credential-helpers",
"binary_version": "0.5.0-2ubuntu0.1+esm1"
},
{
"binary_name": "golang-github-docker-docker-credential-helpers-dev",
"binary_version": "0.5.0-2ubuntu0.1+esm1"
}
]
}