CVE-2020-13401

Docker Engine vulnerability CVE-2020-13401: before 19.03.11, a container process with CAP_NET_RAW can craft IPv6 router advertisements via the bridge/network setup, enabling spoofing of external IPv6 hosts, potential information disclosure, or denial of service. Several connected advisories confi...

CVE-2018-20699

CVE-2018-20699 affects Docker Engine before 18.09, allowing a remote attacker to trigger a denial of service by sending a large value to --cpuset-mems or --cpuset-cpus. The issue is tied to memory consumption in dockerd and is described as related to the code paths in daemon_unix.go, parsers.go, ...