Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:2653
HistoryJun 23, 2020 - 7:31 p.m.

(RHSA-2020:2653) Important: docker security update

2020-06-2319:31:12
access.redhat.com
64

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.6%

JSON

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that runs virtually anywhere.

Security Fix(es):

  • docker: Ambient capability usage in containers (CVE-2016-8867)

  • docker: Security regression of CVE-2019-5736 due to inclusion of vulnerable runc (CVE-2020-14298)

  • docker: Security regression of CVE-2016-9962 due to inclusion of vulnerable runc (CVE-2020-14300)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64docker-client< 1.13.1-162.git64e9980.el7_8docker-client-1.13.1-162.git64e9980.el7_8.x86_64.rpm
RedHat7ppc64ledocker-novolume-plugin< 1.13.1-162.git64e9980.el7_8docker-novolume-plugin-1.13.1-162.git64e9980.el7_8.ppc64le.rpm
RedHat7s390xdocker-novolume-plugin< 1.13.1-162.git64e9980.el7_8docker-novolume-plugin-1.13.1-162.git64e9980.el7_8.s390x.rpm
RedHat7ppc64ledocker-lvm-plugin< 1.13.1-162.git64e9980.el7_8docker-lvm-plugin-1.13.1-162.git64e9980.el7_8.ppc64le.rpm
RedHat7s390xdocker-v1.10-migrator< 1.13.1-162.git64e9980.el7_8docker-v1.10-migrator-1.13.1-162.git64e9980.el7_8.s390x.rpm
RedHat7ppc64ledocker-v1.10-migrator< 1.13.1-162.git64e9980.el7_8docker-v1.10-migrator-1.13.1-162.git64e9980.el7_8.ppc64le.rpm
RedHat7s390xdocker-rhel-push-plugin< 1.13.1-162.git64e9980.el7_8docker-rhel-push-plugin-1.13.1-162.git64e9980.el7_8.s390x.rpm
RedHat7ppc64ledocker-rhel-push-plugin< 1.13.1-162.git64e9980.el7_8docker-rhel-push-plugin-1.13.1-162.git64e9980.el7_8.ppc64le.rpm
RedHat7ppc64ledocker-logrotate< 1.13.1-162.git64e9980.el7_8docker-logrotate-1.13.1-162.git64e9980.el7_8.ppc64le.rpm
RedHat7ppc64ledocker-common< 1.13.1-162.git64e9980.el7_8docker-common-1.13.1-162.git64e9980.el7_8.ppc64le.rpm
Rows per page:
1-10 of 271

Related

nessus 42
veracode 5
ibm 8
osv 6
cve 5
redhatcve 4
prion 5
debiancve 5
ubuntucve 4
oraclelinux 3
fedora 20
altlinux 4
openvas 30
redhat 6
threatpost 5
archlinux 3
mageia 3
gentoo 1
amazon 2
github 1
photon 3
githubexploit 8
vmware 2
zdt 2
exploitpack 1
f5 1
virtuozzo 1
checkpoint_advisories 1
cloudfoundry 1
rocky 1
kitploit 2
cisco 1
suse 4
impervablog 1
hackerone 3
thn 1
almalinux 1
cbl_mariner 1
trendmicroblog 2
nessus
nessus
RHEL 7 : docker (RHSA-2020:2653)
2020-06-24 00:00:00
RHEL 7 : runc (RHSA-2017:0127)
2017-01-18 00:00:00
Fedora 25 : 2:docker (2017-dbc2b618eb)
2017-01-13 00:00:00
veracode
veracode
Information Disclosure
2020-06-24 03:08:12
Remote Code Execution
2020-06-24 03:08:12
Information Disclosure
2017-05-02 07:00:10
ibm
ibm
Security Bulletin: Container Environment Vulnerabilities Affect IBM Secure Proxy (CVE-2020-14298, CVE-2020-14300)
2021-09-08 22:04:43
Security Bulletin: Vulnerability identified in docker for Red Hat Enterprise Linux
2020-08-18 15:40:45
Security Bulletin: IBM API Connect is affected by a critical vulnerability in Kubernetes via runc (CVE-2019-5736)
2019-03-05 17:05:02
osv
osv
CVE-2020-14300
2020-07-13 22:15:12
CVE-2020-14298
2020-07-13 21:15:14
Information Exposure in RunC
2021-12-20 18:21:43
cve
cve
CVE-2020-14300
2020-07-13 22:15:00
CVE-2020-14298
2020-07-13 21:15:00
CVE-2016-9962
2017-01-31 22:59:00
redhatcve
redhatcve
CVE-2020-14300
2020-06-23 19:26:46
CVE-2020-14298
2020-06-23 19:26:46
CVE-2016-9962
2017-01-13 20:41:59
prion
prion
Code injection
2020-07-13 22:15:00
Design/Logic Flaw
2020-07-13 21:15:00
Design/Logic Flaw
2017-01-31 22:59:00
debiancve
debiancve
CVE-2020-14300
2020-07-13 22:15:00
CVE-2020-14298
2020-07-13 21:15:00
CVE-2016-9962
2017-01-31 22:59:00
ubuntucve
ubuntucve
CVE-2020-14300
2020-07-13 00:00:00
CVE-2020-14298
2020-07-13 00:00:00
CVE-2016-9962
2017-01-31 00:00:00
oraclelinux
oraclelinux
docker-engine docker-engine-selinux security and bugfix update
2017-01-13 00:00:00
runc security update
2019-02-11 00:00:00
runc bug fix update
2021-04-28 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: docker-1.12.6-3.git51ef5a8.fc25
2017-01-13 02:25:44
[SECURITY] Fedora 24 Update: docker-latest-1.12.6-1.git51ef5a8.fc24
2017-01-20 18:20:16
[SECURITY] Fedora 25 Update: docker-latest-1.12.6-2.git51ef5a8.fc25
2017-01-15 07:52:30
altlinux
altlinux
Security fix for the ALT Linux 10 package runc version 1.0.0-alt2.gitc91b5be
2017-01-23 00:00:00
Security fix for the ALT Linux 8 package runc version 1.0.0-alt2.gitc91b5be
2017-01-23 00:00:00
Security fix for the ALT Linux 10 package runc version 1.0.0-alt7.git0a012df
2019-02-13 00:00:00
openvas
openvas
Docker < 1.12.6 Local Privilege Escalation Vulnerability
2017-01-11 00:00:00
Mageia: Security Advisory (MGASA-2017-0189)
2022-01-28 00:00:00
Fedora Update for docker-latest FEDORA-2017-fcd02e2c2d
2017-01-16 00:00:00
redhat
redhat
(RHSA-2017:0123) Moderate: docker-latest security, bug fix, and enhancement update
2017-01-17 20:35:03
(RHSA-2017:0127) Moderate: runc security and bug fix update
2017-01-17 20:35:12
(RHSA-2017:0116) Moderate: docker security, bug fix, and enhancement update
2017-01-17 20:34:47
threatpost
threatpost
Docker Patches Privilege Escalation Vulnerability
2017-01-18 14:26:35
Public Clouds & Shared Responsibility: Lessons from Vulnerability Disclosure
2021-10-26 21:22:26
'Azurescape' Kubernetes Attack Allows Cross-Container Cloud Compromise
2021-09-09 16:39:13
archlinux
archlinux
[ASA-201805-11] runc: privilege escalation
2018-05-16 00:00:00
[ASA-201701-19] docker: privilege escalation
2017-01-13 00:00:00
[ASA-201902-20] flatpak: privilege escalation
2019-02-17 00:00:00
mageia
mageia
Updated docker packages fix security vulnerability
2017-06-28 13:01:20
Updated opencontainers-runc packages fix security vulnerability
2019-02-13 14:08:25
Updated lxc packages fix security vulnerability
2019-02-17 03:31:02
gentoo
gentoo
runC: Privilege escalation
2017-01-12 00:00:00
amazon
amazon
Important: docker
2017-01-10 18:00:00
Important: docker
2019-02-08 22:28:00
github
github
Information Exposure in RunC
2021-12-20 18:21:43
photon
photon
Important Photon OS Security Update - PHSA-2019-0001
2019-02-12 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0129
2019-02-13 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0208
2019-02-12 00:00:00
githubexploit
githubexploit
Exploit for OS Command Injection in Docker
2019-12-12 16:57:13
Exploit for OS Command Injection in Docker
2021-07-08 22:46:30
Exploit for OS Command Injection in Docker
2020-02-04 22:38:14
vmware
vmware
VMware product updates resolve mishandled file descriptor vulnerability in runc container runtime.
2019-02-15 00:00:00
VMware product updates resolve mishandled file descriptor vulnerability in runc container runtime.
2019-02-15 00:00:00
zdt
zdt
runC < 1.0-rc6 (Docker < 18.09.2) - Host Command Execution Exploit
2019-02-12 00:00:00
runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (2)
2019-02-15 00:00:00
exploitpack
exploitpack
runc 1.0-rc6 (Docker 18.09.2) - Container Breakout (2)
2019-02-13 00:00:00
f5
f5
K46421255 : Docker privilege elevation vulnerability CVE-2019-5736
2019-03-01 00:00:00
virtuozzo
virtuozzo
Important kernel security update: Virtuozzo ReadyKernel patch 72.0 for all supported Virtuozzo kernels and that of Virtuozzo Infrastructure Platform 2.5
2019-02-12 00:00:00
checkpoint_advisories
checkpoint_advisories
runc Container Escape (CVE-2019-5736)
2019-02-14 00:00:00
cloudfoundry
cloudfoundry
CVE-2019-5736: runC container breakout | Cloud Foundry
2019-02-13 00:00:00
rocky
rocky
container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
kitploit
kitploit
Kubesploit - A Cross-Platform Post-Exploitation HTTP/2 Command And Control Server And Agent Written In Golang
2021-04-22 12:30:00
Whoc - A Container Image That Extracts The Underlying Container Runtime
2021-11-24 11:30:00
cisco
cisco
Container Privilege Escalation Vulnerability Affecting Cisco Products: February 2019
2019-02-15 17:00:00
suse
suse
Security update for docker-runc (important)
2019-02-27 00:00:00
Security update for lxc (moderate)
2019-10-03 00:00:00
Security update for docker-runc (important)
2019-02-18 00:00:00
impervablog
impervablog
Hundreds of Vulnerable Docker Hosts Exploited by Cryptocurrency Miners
2019-03-04 21:00:39
hackerone
hackerone
Internet Bug Bounty: CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host
2019-02-13 18:50:11
50m-ctf: CTF write-up: c8889970d9fb722066f31e804e351993
2019-03-03 10:08:22
50m-ctf: $50 million CTF Writeup
2019-03-25 02:28:13
thn
thn
RunC Flaw Lets Attackers Escape Linux Containers to Gain Root on Hosts
2019-02-12 08:59:00
almalinux
almalinux
Important: container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
cbl_mariner
cbl_mariner
CVE-2019-5736 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
trendmicroblog
trendmicroblog
This Week in Security News: Instagram Hackers and Enterprise Threats
2019-03-01 14:57:50
Attacking Containers and runC
2019-02-12 19:22:35

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.6%

JSON
Related for RHSA-2020:2653
nessus42veracode5ibm8osv6cve5redhatcve4prion5debiancve5ubuntucve4oraclelinux3fedora20altlinux4openvas30redhat6threatpost5archlinux3mageia3gentoo1amazon2github1photon3githubexploit8vmware2zdt2exploitpack1f51virtuozzo1checkpoint_advisories1cloudfoundry1rocky1kitploit2cisco1suse4impervablog1hackerone3thn1almalinux1cbl_mariner1trendmicroblog2