Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-14298

Опубликовано: 13 июл. 2020
Источник: nvd
CVSS3: 8.8
CVSS2: 4.6
EPSS Низкий

Описание

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:docker:docker:1.13.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
Версия от 3.0 (включая) до 3.7.61 (включая)
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 35%
0.00142
Низкий

8.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-273

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 5 лет назад

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.

CVSS3: 8.8
redhat
больше 5 лет назад

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.

CVSS3: 8.8
debian
больше 5 лет назад

The version of docker as released for Red Hat Enterprise Linux 7 Extra ...

CVSS3: 8.8
github
больше 3 лет назад

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.

EPSS

Процентиль: 35%
0.00142
Низкий

8.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-273