Medium, CVSS 4.0GoPublished
Denial of Service in docker2aci
CVE-2016-8579 · GHSA-gfh2-7jg5-653p
- Affected
- Go github.com/appc/docker2aci < 0.13.0
- Fixed in
- 0.13.0· Vendor fix available
- Issue
- docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.
Recommended action: Upgrade to 0.13.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.