The vulnerability in the exec-path configuration of the dockerd daemon on the Docker Desktop operating system for development and container application delivery platforms allows a attacker to trigger a service failure.

🗓️ 15 Jul 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

Vulnerability in dockerd exec-path on Docker Desktop lets attacker trigger failures via access control flaws.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-5652	9 Jul 202419:48	–	circl
CNNVD	Docker Desktop Security Vulnerabilities	9 Jul 202400:00	–	cnnvd
CVE	CVE-2024-5652	9 Jul 202417:07	–	cve
Cvelist	CVE-2024-5652 In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode	9 Jul 202417:07	–	cvelist
EUVD	EUVD-2024-46829	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5652	9 Jul 202417:15	–	nvd
OSV	CVE-2024-5652	9 Jul 202417:15	–	osv
Positive Technologies	PT-2024-4755 · Docker · Docker Desktop	5 May 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-5652 In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode	9 Jul 202417:07	–	vulnrichment
Zero Day Initiative	Docker Desktop Daemon CLI External Control of File Path Denial-of-Service Vulnerability	26 Jul 202400:00	–	zdi

Vulners

Node

docker docker_desktopRange<4.31.0

Source	Link
vuldb	www.vuldb.com/
docs	www.docs.docker.com/desktop/release-notes/
github	www.github.com/advisories/GHSA-gwjv-qxvj-5x3w
web	www.web.nvd.nist.gov/view/vuln/detail

15 Jul 2024 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25.2

CVSS 36.1

EPSS0.00374

dockerd exec path docker desktop access control weakness service failure vulnerability