CVE-2023-0629

🗓️ 13 Mar 2023 11:16:41Reported by DockerType

Docker Desktop before 4.17.0 allows bypassing of ECI restrictions via -H or DOCKER_HOST, affecting versions 4.13.0 to 4.17.0

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-0629	13 Mar 202315:53	–	circl
CNNVD	Docker Desktop 安全漏洞	13 Mar 202300:00	–	cnnvd
Cvelist	CVE-2023-0629 Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers	13 Mar 202311:16	–	cvelist
EUVD	EUVD-2023-12663	3 Oct 202520:07	–	euvd
NVD	CVE-2023-0629	13 Mar 202312:15	–	nvd
Prion	Design/Logic Flaw	13 Mar 202312:15	–	prion
Positive Technologies	PT-2023-1878 · Docker · Docker Desktop	13 Mar 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-0629 Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers	13 Mar 202311:16	–	vulnrichment

NVD

Node

docker docker_desktopRange4.13.0–4.17.0

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Settings Management",
      "Enhanced Container Isolation"
    ],
    "platforms": [
      "MacOS",
      "Windows (Hyper-V)",
      "Linux"
    ],
    "product": "Docker Desktop",
    "vendor": "Docker Inc.",
    "versions": [
      {
        "lessThan": "4.17.0",
        "status": "affected",
        "version": "4.13.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
docs	www.docs.docker.com/desktop/release-notes/

21 Nov 2024 07:37Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.1

EPSS0.00072

SSVC