Docker: Information disclosure

Background

Docker is the world’s leading software containerization platform.

Description

It was found that Docker created network bridges which by default accept IPv6 router advertisements.

Impact

An attacker who gained access to a container with CAP_NET_RAW capability may be able to to spoof router advertisements, resulting in information disclosure or denial of service.

Workaround

There is no known workaround at this time.

Resolution

All Docker users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-emulation/docker-19.03.12"