Docker Desktop WindowsContainerStartRequest Heap Buffer Overflow DoS

The vulnerability of the start function in the implementation of the WindowsContainerStartRequest class for the Docker Desktop for Windows development and delivery platform is related to a race condition that allows tracking of links in the data-root directory for the DaemonJSON parameter...

CVE-2022-38730

Docker Desktop for Windows before 4.6 allows attackers to overwrite any file through the windowscontainers/start dockerBackendV2 API by controlling the data-root field inside the DaemonJSON field in the WindowsContainerStartRequest class. This allows exploiting a symlink vulnerability in...