https://github.com/mikesir87/docker-nginx-patching-demo
Repo that produces Docker images (one HIGHLY vulnerable) to show container-based application patching
https://github.com/mikesir87/docker-nginx-patching-demo
Last synced: about 2 months ago
JSON representation
Repo that produces Docker images (one HIGHLY vulnerable) to show container-based application patching
- Host: GitHub
- URL: https://github.com/mikesir87/docker-nginx-patching-demo
- Owner: mikesir87
- Created: 2017-09-21T03:52:05.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2017-09-21T12:34:22.000Z (over 7 years ago)
- Last Synced: 2025-04-01T15:54:15.605Z (about 2 months ago)
- Language: Nginx
- Size: 4.88 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
THIS REPO CONTAINS VULNERABLE CODE. IT IS TO BE USED ONLY FOR DEMONSTRATION PURPOSES.
The image with tag `vulnerable` or `1.0` is compiled with OpenSSL version 1.0.1f, which is vulnerable to the vulnerability known as Heartbleed (CVE-2014-0160). As such, it should not be used for anything remotely production. The intent is to provide demonstrations on how containers change how applications are patched and updated.
The image with tag `non-vulnerable` or `1.1` is compiled with OpenSSL version 1.0.1u, which has no known vulnerabilities (as of 20 Sept 2017).