Medium severity5.3NVD Advisory· Published Dec 30, 2020· Updated Jun 17, 2026
CVE-2020-27534
CVE-2020-27534
Description
util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/moby/mobyGo | < 19.03.9 | 19.03.9 |
github.com/docker/dockerGo | < 19.03.9 | 19.03.9 |
Affected products
42- Docker Engine/Docker Enginedescription
- osv-coords40 versionspkg:apk/chainguard/docker-initpkg:apk/chainguard/docker-machine-driver-harvesterpkg:golang/github.com/moby/mobypkg:golang/github.com/docker/dockerpkg:apk/chainguard/py3-dockerpkg:apk/wolfi/docker-config-mirror-gcrpkg:apk/wolfi/docker-machine-driver-harvesterpkg:apk/wolfi/docker-modprobe-compatpkg:apk/wolfi/py3-supported-dockerpkg:apk/wolfi/py3.10-dockerpkg:apk/wolfi/py3.11-dockerpkg:apk/wolfi/py3.12-dockerpkg:apk/chainguard/py3.10-dockerpkg:apk/chainguard/rancher-machinepkg:apk/wolfi/docker-initpkg:apk/wolfi/dockerpkg:apk/wolfi/docker-oci-entrypointpkg:apk/chainguard/docker-rootlesspkg:apk/wolfi/dockerd-oci-entrypointpkg:apk/chainguard/docker-dindpkg:apk/wolfi/docker-dindpkg:apk/wolfi/docker-rootlesspkg:apk/wolfi/py3-dockerpkg:apk/chainguard/docker-config-mirror-gcrpkg:apk/chainguard/docker-dind-compatpkg:apk/chainguard/docker-modprobe-compatpkg:apk/wolfi/dockerd-servicepkg:apk/wolfi/rancher-machinepkg:apk/chainguard/docker-oci-entrypointpkg:apk/chainguard/dockerpkg:apk/chainguard/dockerdpkg:apk/wolfi/dockerdpkg:apk/chainguard/dockerd-oci-entrypointpkg:apk/chainguard/dockerd-servicepkg:apk/chainguard/py3.12-dockerpkg:apk/chainguard/py3-supported-dockerpkg:apk/chainguard/py3.11-dockerpkg:apk/chainguard/py3.13-dockerpkg:apk/wolfi/docker-dind-compatpkg:apk/wolfi/py3.13-docker
< 0+ 39 more
- (no CPE)range: < 0
- (no CPE)range: < 1.0.5-r0
- (no CPE)range: < 19.03.9
- (no CPE)range: < 19.03.9
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.0.5-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.15.0.137-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.15.0.137-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
Patches
Vulnerability mechanics
References
9- web.archive.org/web/20200530054359/https://docs.docker.com/engine/release-notes/nvdRelease NotesThird Party Advisory
- github.com/advisories/GHSA-6hwg-w5jg-9c6xghsaADVISORY
- github.com/moby/buildkit/pull/1462nvdThird Party AdvisoryWEB
- github.com/moby/moby/pull/40877nvdThird Party AdvisoryWEB
- golang.org/pkg/io/ioutil/nvdThird Party Advisory
- golang.org/pkg/os/nvdThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2020-27534ghsaADVISORY
- web.archive.org/web/20200530054359/https://docs.docker.com/engine/release-notesghsaWEB
- bugzilla.redhat.com/show_bug.cgighsaWEB
News mentions
0No linked articles in our index yet.