CVE-2024-5652 In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode

🗓️ 09 Jul 2024 17:07:08Reported by DockerType

CVE-2024-5652 in Docker Desktop on Windows enables DoS via exec-path confi

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability in the exec-path configuration of the dockerd daemon on the Docker Desktop operating system for development and container application delivery platforms allows a attacker to trigger a service failure.	15 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-5652	9 Jul 202419:48	–	circl
CNNVD	Docker Desktop Security Vulnerabilities	9 Jul 202400:00	–	cnnvd
CVE	CVE-2024-5652	9 Jul 202417:07	–	cve
EUVD	EUVD-2024-46829	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5652	9 Jul 202417:15	–	nvd
OSV	CVE-2024-5652	9 Jul 202417:15	–	osv
Positive Technologies	PT-2024-4755 · Docker · Docker Desktop	5 May 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-5652 In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode	9 Jul 202417:07	–	vulnrichment
Zero Day Initiative	Docker Desktop Daemon CLI External Control of File Path Denial-of-Service Vulnerability	26 Jul 202400:00	–	zdi

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Docker Desktop",
    "vendor": "Docker Inc.",
    "versions": [
      {
        "lessThan": "v4.31.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
docs	www.docs.docker.com/desktop/release-notes/

09 Jul 2024 17:07Current

CVSS 3.16.1

EPSS0.00073