Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-13401

Опубликовано: 02 июн. 2020
Источник: nvd
CVSS3: 6
CVSS2: 6
EPSS Средний

Описание

An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:docker:engine:*:*:*:*:*:*:*:*
Версия до 19.03.11 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Конфигурация 4
cpe:2.3:a:broadcom:sannav:-:*:*:*:*:*:*:*

EPSS

Процентиль: 94%
0.1287
Средний

6 Medium

CVSS3

6 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 6
ubuntu
больше 5 лет назад

An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.

CVSS3: 6
redhat
больше 5 лет назад

An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.

CVSS3: 6
debian
больше 5 лет назад

An issue was discovered in Docker Engine before 19.03.11. An attacker ...

suse-cvrf
больше 5 лет назад

Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

suse-cvrf
больше 5 лет назад

Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

EPSS

Процентиль: 94%
0.1287
Средний

6 Medium

CVSS3

6 Medium

CVSS2

Дефекты

CWE-20