{"id":"CVE-2018-10892","details":"The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.","modified":"2026-08-27T03:47:47.591058544Z","published":"2018-07-06T16:29:00.150Z","related":["CGA-rrhq-hjjm-w5m5","SUSE-SU-2019:2117-1","SUSE-SU-2019:2119-1","SUSE-SU-2025:03540-1","SUSE-SU-2025:03545-1","openSUSE-SU-2019:2021-1","openSUSE-SU-2024:10722-1","openSUSE-SU-2025:15589-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"15.0"},{"last_affected":"15.0"},{"introduced":"15.1"},{"last_affected":"15.1"}],"source":"CPE_STRING","vendor_product":"opensuse:leap"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux"},{"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server","cpes":["cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}]},{"extracted_events":[{"introduced":"12"},{"last_affected":"12"}],"source":"CPE_STRING","vendor_product":"redhat:openstack","cpes":["cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHBA-2018:2796"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:2482"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:2729"},{"type":"ADVISORY","url":"https://github.com/moby/moby/pull/37404"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10892"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/docker-archive/docker-ce","events":[{"introduced":"0"},{"last_affected":"9ee9f402cd1eba817c5591a64f1d770c87c421a4"}],"database_specific":{"cpe":["cpe:2.3:a:docker:docker:*:*:*:*:community_edition:*:*:*","cpe:2.3:a:docker:docker:*:*:*:*:enterprise_edition:*:*:*"],"extracted_events":[{"introduced":"1.11"},{"last_affected":"18.03.1"}],"source":"CPE_RANGE"}}],"versions":["v18.03.1-ce","v18.03.1-ce-rc2","v18.03.1-ce-rc1","v18.03.0-ce","v18.03.0-ce-rc4","v18.03.0-ce-rc3","v18.03.0-ce-rc1","v18.03.0-ce-rc2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10892.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/docker-archive/engine","events":[{"introduced":"4dc5990d7565a4a15d641bc6a0bc50a02cfcf302"},{"last_affected":"20afdcca5bf4fc0a0352ca9ac0343a5b33433ea6"}],"database_specific":{"cpe":["cpe:2.3:a:docker:docker:*:*:*:*:community_edition:*:*:*","cpe:2.3:a:docker:docker:*:*:*:*:enterprise_edition:*:*:*"],"extracted_events":[{"introduced":"1.11"},{"last_affected":"18.03.1"}],"source":"CPE_RANGE"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10892.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/moby/moby","events":[{"introduced":"4dc5990d7565a4a15d641bc6a0bc50a02cfcf302"},{"last_affected":"20afdcca5bf4fc0a0352ca9ac0343a5b33433ea6"},{"last_affected":"f5ec1e2936dcbe7b5001c2b817188b095c700c27"}],"database_specific":{"cpe":["cpe:2.3:a:docker:docker:*:*:*:*:community_edition:*:*:*","cpe:2.3:a:docker:docker:*:*:*:*:enterprise_edition:*:*:*","cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.11"},{"last_affected":"18.03.1"},{"last_affected":"17.03.2"}],"source":"CPE_RANGE"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10892.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}]}