PT-2020-3631 · Docker+2 · Docker Engine+3
Etienne Champetier
·
Published
2020-06-02
·
Updated
2026-05-18
·
CVE-2020-13401
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Docker Engine versions prior to 19.03.11
Description
The issue is related to a lack of input validation in the CAP NET RAW component of Docker Engine, which can be exploited by a remote attacker to gain access to sensitive information, compromise data integrity, and cause a denial of service. An attacker with the CAP NET RAW capability in a container can craft IPv6 router advertisements to spoof external IPv6 hosts.
Recommendations
For Docker Engine versions prior to 19.03.11, update to version 19.03.11 or later to resolve the issue. As a temporary workaround, consider restricting the use of the CAP NET RAW capability in containers to minimize the risk of exploitation.
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Docker
Docker Engine
Suse