Re:Docker Image Vulnerability Research
by jsulinski on Tuesday March 14, 2017 @07:05PM
(#13872357)
This is a very well-written explanation.
The only exception is when people have access to the underlying container, willing or not. Then these vulnerable binaries can lead to a vulnerable container.
This is also why the subjectivity in CVE rating is such a significant problem.
The only exception is when people have access to the underlying container, willing or not. Then these vulnerable binaries can lead to a vulnerable container.
This is also why the subjectivity in CVE rating is such a significant problem.