Lucene search
HistorySep 01, 2018 - 1:29 a.m.
CVE-2018-15514
cve-2018-15514
docker
windows
vulnerability
escalation
nvd
security
exploit
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.7%
HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the “docker-users” group (who may not otherwise have administrator access) to escalate to administrator privileges.
Affected configurations
Node
dockerdockerMatch1.10.0.0-0communitywindows
ORdockerdockerMatch1.10.1.42-1communitywindows
ORdockerdockerMatch1.10.2.12communitywindows
ORdockerdockerMatch1.10.2.14communitywindows
ORdockerdockerMatch1.10.4.0communitywindows
ORdockerdockerMatch1.10.6communitywindows
ORdockerdockerMatch1.11.0communitywindows
ORdockerdockerMatch1.11.0beta10communitywindows
ORdockerdockerMatch1.11.0beta7communitywindows
ORdockerdockerMatch1.11.0beta8communitywindows
ORdockerdockerMatch1.11.0beta9communitywindows
ORdockerdockerMatch1.11.1beta11communitywindows
ORdockerdockerMatch1.11.1beta11bcommunitywindows
ORdockerdockerMatch1.11.1beta12communitywindows
ORdockerdockerMatch1.11.1beta13communitywindows
ORdockerdockerMatch1.11.1beta14communitywindows
ORdockerdockerMatch1.11.2beta15communitywindows
ORdockerdockerMatch1.12.0windows
ORdockerdockerMatch1.12.0beta21communitywindows
ORdockerdockerMatch1.12.0beta22communitywindows
ORdockerdockerMatch1.12.0rc2-beta16communitywindows
ORdockerdockerMatch1.12.0rc2-beta17communitywindows
ORdockerdockerMatch1.12.0rc3-beta18communitywindows
ORdockerdockerMatch1.12.0rc3-beta18.1communitywindows
ORdockerdockerMatch1.12.0rc4-beta19communitywindows
ORdockerdockerMatch1.12.0rc4-beta20communitywindows
ORdockerdockerMatch1.12.1windows
ORdockerdockerMatch1.12.1beta24communitywindows
ORdockerdockerMatch1.12.1beta25communitywindows
ORdockerdockerMatch1.12.1beta26communitywindows
ORdockerdockerMatch1.12.1beta29.1communitywindows
ORdockerdockerMatch1.12.1rc1-beta23communitywindows
ORdockerdockerMatch1.12.2beta29.2communitywindows
ORdockerdockerMatch1.12.2rc1-beta27communitywindows
ORdockerdockerMatch1.12.2rc3-beta28communitywindows
ORdockerdockerMatch1.12.3windows
ORdockerdockerMatch1.12.3beta29.3communitywindows
ORdockerdockerMatch1.12.3beta30communitywindows
ORdockerdockerMatch1.12.3rc1-beta29communitywindows
ORdockerdockerMatch1.12.5windows
ORdockerdockerMatch1.13.0windows
ORdockerdockerMatch1.13.0beta38communitywindows
ORdockerdockerMatch1.13.0beta39communitywindows
ORdockerdockerMatch1.13.0rc2-beta31communitywindows
ORdockerdockerMatch1.13.0rc3-beta32communitywindows
ORdockerdockerMatch1.13.0rc3-beta32.1communitywindows
ORdockerdockerMatch1.13.0rc3-beta33communitywindows
ORdockerdockerMatch1.13.0rc4-beta34communitywindows
ORdockerdockerMatch1.13.0rc5-beta35communitywindows
ORdockerdockerMatch1.13.0rc6-beta36communitywindows
ORdockerdockerMatch1.13.0rc7-beta37communitywindows
ORdockerdockerMatch1.13.1windows
ORdockerdockerMatch1.13.1rc1-beta40communitywindows
ORdockerdockerMatch1.13.1rc2-beta41communitywindows
ORdockerdockerMatch17.0.4win7communitywindows
ORdockerdockerMatch17.0.5win9communitywindows
ORdockerdockerMatch17.03.0communitywindows
ORdockerdockerMatch17.03.0rc1-win1communitywindows
ORdockerdockerMatch17.03.1win12communitywindows
ORdockerdockerMatch17.04.0win6communitywindows
ORdockerdockerMatch17.06.0win13communitywindows
ORdockerdockerMatch17.06.0win14communitywindows
ORdockerdockerMatch17.06.0win15communitywindows
ORdockerdockerMatch17.06.0win16communitywindows
ORdockerdockerMatch17.06.0win17communitywindows
ORdockerdockerMatch17.06.0win18communitywindows
ORdockerdockerMatch17.06.1rc1-win20communitywindows
ORdockerdockerMatch17.06.1rc1-win24communitywindows
ORdockerdockerMatch17.06.2win27communitywindows
ORdockerdockerMatch17.07.0rc1-win21communitywindows
ORdockerdockerMatch17.07.0rc2-win22communitywindows
ORdockerdockerMatch17.07.0rc3-win23communitywindows
ORdockerdockerMatch17.07.0rc4-win25communitywindows
ORdockerdockerMatch17.07.0win26communitywindows
ORdockerdockerMatch17.09.0rc1-win28communitywindows
ORdockerdockerMatch17.09.0rc2-win29communitywindows
ORdockerdockerMatch17.09.0rc3-win30communitywindows
ORdockerdockerMatch17.09.0win31communitywindows
ORdockerdockerMatch17.09.0win32communitywindows
ORdockerdockerMatch17.09.0win33communitywindows
ORdockerdockerMatch17.09.0win34communitywindows
ORdockerdockerMatch17.09.1win42communitywindows
ORdockerdockerMatch17.10.0win36communitywindows
ORdockerdockerMatch17.11.0rc2-win37communitywindows
ORdockerdockerMatch17.11.0rc3-win38communitywindows
ORdockerdockerMatch17.11.0rc4-win39communitywindows
ORdockerdockerMatch17.11.0win40communitywindows
ORdockerdockerMatch17.12.0rc2-win41communitywindows
ORdockerdockerMatch17.12.0rc3-win43communitywindows
ORdockerdockerMatch17.12.0rc4-win44communitywindows
ORdockerdockerMatch17.12.0win45communitywindows
ORdockerdockerMatch17.12.0win46communitywindows
ORdockerdockerMatch17.12.0win47communitywindows
ORdockerdockerMatch18.01.0win48communitywindows
ORdockerdockerMatch18.02.0rc1-win50communitywindows
ORdockerdockerMatch18.02.0rc2-win51communitywindows
ORdockerdockerMatch18.02.0win52communitywindows
ORdockerdockerMatch18.03.0rc3-win56communitywindows
ORdockerdockerMatch18.03.0win58communitywindows
ORdockerdockerMatch18.03.0win59communitywindows
ORdockerdockerMatch18.03.1win65communitywindows
ORdockerdockerMatch18.04.0rc2-win61communitywindows
ORdockerdockerMatch18.05.0rc1-win63communitywindows
ORdockerdockerMatch18.05.0win66communitywindows
Related
nvd
nvd
CVE-2018-15514
2018-09-01 01:29:00
openvas
openvas
Docker for Windows Privilege Escalation Vulnerability
2018-09-06 00:00:00
nessus
nessus
srcincite
srcincite
prion
prion
Design/Logic Flaw
2018-09-01 01:29:00
osv
osv
CVE-2018-15514
2018-09-01 01:29:00
cvelist
cvelist
CVE-2018-15514
2018-09-01 01:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.7%
Related for CVE-2018-15514