docker-credential-helpers before 0.6.3 has a double free in the List functions.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Credential_helpers | Docker | * | 0.6.3 (excluding) |
| Docker.io | Ubuntu | bionic | * |
| Docker.io | Ubuntu | disco | * |
| Docker.io | Ubuntu | trusty | * |
| Docker.io | Ubuntu | xenial | * |
| Golang-github-docker-docker-credential-helpers | Ubuntu | bionic | * |
| Golang-github-docker-docker-credential-helpers | Ubuntu | disco | * |
| Golang-github-docker-docker-credential-helpers | Ubuntu | esm-apps/bionic | * |
| Golang-github-docker-docker-credential-helpers | Ubuntu | trusty | * |
| Golang-github-docker-docker-credential-helpers | Ubuntu | upstream | * |