The vulnerability of the CAP_NET_RAW component in software for automated deployment and application management in Docker-enabled environments allows a attacker to access confidential data, compromise its integrity, and cause service failures.

🗓️ 19 Aug 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Remote attacker exploits CAP_NET_RAW flaw in deployment software to access data and disrupt services.

Reporter	Title	Published	Views	Family All 125
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Docker affects Cloud Pak Sytem (CVE-2020-13401)	12 Oct 202009:40	–	ibm
IBM Security Bulletins	Security Bulletin: Spectrum Discover has addressed multiple security vulnerabilities (CVE-2020-13401, CVE-2019-20372)	13 May 202116:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Docker affects IBM InfoSphere Information Server	1 Apr 202121:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to a Docker vulnerability (CVE-2020-13401)	27 Sep 202018:43	–	ibm
IBM Security Bulletins	Security Bulletin: Docker vulnerability affects IBM Spectrum Protect Plus (CVE-2020-13401)	14 Sep 202019:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Automation Manager is affected by an issue with Docker before 19.03.11.	15 May 202312:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Managed Service Content Runtime is affected by an issue with Docker before 19.03.11.	16 Sep 202013:46	–	ibm
Tenable Nessus	Amazon Linux 2 : docker (ALASDOCKER-2025-062)	29 Apr 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker (ALASECS-2025-063)	29 Apr 202500:00	–	nessus

Vulners

Node

docker dockerRange<19.03.11

OR

novell opensuse_leapMatch15.1

OR

fedora fedoraMatch31

OR

fedora fedoraMatch32

Source	Link
docs	www.docs.docker.com/engine/release-notes/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-13401
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-13401
github	www.github.com/docker/docker-ce/releases/tag/v19.03.11
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/KJZLKRCOJMOGUIJI2AS27BOZS3RBEF3K/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/DN4JQAOXBE3XUNK3FD423LHE3K74EMJT/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-06/msg00040.html
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
web	www.web.nvd.nist.gov/view/vuln/detail

21 Nov 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26

CVSS 36

EPSS0.02839

cap net raw docker deployment software data access service disruption