CVE-2024-6222 In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages

🗓️ 09 Jul 2024 17:16:05Reported by DockerType

CVE-2024-6222 Docker Desktop Security Vulnerability Fi

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the Docker Desktop platform for developing and delivering container applications lies in the insufficient restrictions on communication channels between endpoints. This allows attackers to gain unauthorized access to protected information.	15 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-6222	9 Jul 202420:39	–	circl
CNNVD	Docker Desktop Security Vulnerabilities	9 Jul 202400:00	–	cnnvd
CVE	CVE-2024-6222	9 Jul 202417:16	–	cve
EUVD	EUVD-2024-47355	3 Oct 202520:07	–	euvd
NVD	CVE-2024-6222	9 Jul 202418:15	–	nvd
OSV	CVE-2024-6222	9 Jul 202418:15	–	osv
Positive Technologies	PT-2024-4754 · Docker · Docker Desktop	8 Apr 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-6222 In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages	9 Jul 202417:16	–	vulnrichment
Zero Day Initiative	(Pwn2Own) Docker Desktop extension-manager Exposed Dangerous Function Privilege Escalation Vulnerability	29 Jul 202400:00	–	zdi

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux"
    ],
    "product": "Docker Desktop",
    "vendor": "Docker Inc.",
    "versions": [
      {
        "lessThan": "v4.29.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
docs	www.docs.docker.com/desktop/release-notes/

09 Jul 2024 17:16Current

CVSS 47.3

EPSS0.00557

CWE-923