onyx --cves cve-2020-13401
CVE-2020-13401
- score
- <0.1
- cvss
- 6.0
- epss
- 2.9%
- published
- 2020-06-02
- kev added
- —
- first seen
Docker Engine before 19.03.11 contains a vulnerability caused by insufficient validation of IPv6 router advertisements in containers with CAP_NET_RAW capability, letting attackers spoof IPv6 hosts, impact sensitive data, or cause denial of service, exploit requires attacker to have CAP_NET_RAW capability in container.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
- Public PoC
Exploit availability
Public PoC flagged by vulnx; no direct exploit link among the citations.
Weaknesses
References 8
- https://docs.docker.com/engine/release-notes/
- http://www.openwall.com/lists/oss-security/2020/06/01/5
- https://github.com/docker/docker-ce/releases/tag/v19.03.11
- https://security.gentoo.org/glsa/202008-15
- https://security.netapp.com/advisory/ntap-20200717-0002/
- https://www.debian.org/security/2020/dsa-4716
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DN4JQAOXBE3XUNK3FD423LHE3K74EMJT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJZLKRCOJMOGUIJI2AS27BOZS3RBEF3K/