Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 104

Export CSV
CVE-2017-11468

docker-distribution: Does not properly restrict the amount of content accepted from a user

Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Docker Redhat
Products
Docker Registry Enterprise Linux Server Rhel Extras Other
CVE-2015-3627

docker: insecure opening of file-descriptor 1 leading to privilege escalation

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Docker Redhat
Products
Docker Libcontainer Rhel Extras Other
CVE-2014-3499

docker: systemd socket activation results in privilege escalation

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Docker Fedoraproject Redhat
Products
Docker Fedora Rhel Extras Other
CVE-2014-5277

docker: fallback to HTTP when HTTPS connections to the registry fail

Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Docker
Products
Docker Docker-py
CVE-2014-6407

docker: symbolic and hardlink issues leading to privilege escalation

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.

CVSS 2.0 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Docker Redhat
Products
Docker Rhel Extras Other
CVE-2014-6408

docker: potential container escalation

Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed
Vendors
Docker
Products
Docker
CVE-2014-9357

docker: Escalation of privileges during decompression of LZMA archives

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed
Vendors
Docker Redhat
Products
Docker Rhel Extras Other
CVE-2014-9358

docker: Path traversal and spoofing opportunities presented through image identifiers

Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

CVSS 2.0 · 6.4 Medium EPSS 2.5% KEV · Not listed
Vendors
Docker Redhat
Products
Docker Rhel Extras Other
CVE-2015-3630

docker: Read/write proc paths allow host modification & information disclosure

Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Docker Redhat
Products
Docker Rhel Extras Other
CVE-2015-3631

docker: volume mounts allow LSM profile escalation

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Docker Redhat
Products
Docker Rhel Extras Other
CVE-2016-3697

docker: privilege escalation via confusion of usernames and UIDs

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Docker Linuxfoundation Opensuse and 1 more
Products
Docker Runc Opensuse and 1 more
CVE-2016-6595

docker: DoS via repeatedly joining and quitting swarm cluster as a node

The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of cluster joins) via a long sequence of join and quit actions. NOTE: the vendor disputes this issue, stating that this sequence is not "removing the state that is left by old nodes. At some point the manager obviously stops being able to accept new nodes, since it runs out of memory. Given that both for Docker swarm and for Docker Swarmkit nodes are *required* to provide a secret token (it's actually the only mode of operation), this means that no adversary can simply join nodes and exhaust manager resources. We can't do anything about a manager running out of memory and not being able to add new legitimate nodes to the system. This is merely a resource provisioning issue, and definitely not a CVE worthy vulnerability.

CVSS 3.0 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Docker
Products
Docker
CVE-2016-8867

docker: Ambient capability usage in containers

Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.

CVSS 3.1 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Docker Redhat
Products
Docker Rhel Extras Other
CVE-2023-0629

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/docker_engine_linux on Windows, via the -H (--host) CLI flag or the DOCKER_HOST environment variable and launch containers without the additional hardening features provided by ECI. This would not affect already running containers, nor containers launched through the usual approach (without Docker's raw socket). The affected functionality is available for Docker Business customers only and assumes an environment where users are not granted local root or Administrator privileges. This issue has been fixed in Docker Desktop 4.17.0. Affected Docker Desktop versions: from 4.13.0 before 4.17.0.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Docker
Products
Docker Desktop
CVE-2023-0628

Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL

Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Docker
Products
Docker Desktop
CVE-2023-5166

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Docker
Products
Docker Desktop
CVE-2023-5165

Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell

Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time window after launching Docker Desktop. The affected functionality is available for Docker Business customers only and assumes an environment where users are not granted local root or Administrator privileges. This issue has been fixed in Docker Desktop 4.23.0. Affected Docker Desktop versions: from 4.13.0 before 4.23.0.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Docker
Products
Docker Desktop
CVE-2023-0633

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Docker
Products
Docker Desktop
CVE-2023-0627

Docker Desktop 4.11.x allows --no-windows-containers flag bypass

Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Docker
Products
Docker Desktop
CVE-2023-0626

Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route

Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route. This issue affects Docker Desktop: before 4.12.0.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Docker
Products
Docker Desktop