| Package | Affected versions | Patched versions |
|---|---|---|
| docker | = 1.10.0.0-0= 1.10.1.42-1= 1.10.2.12= 1.10.2.14= 1.10.4.0= 1.10.6= 1.11.0= 1.11.1= 1.11.2= 1.12.0= 1.12.1= 1.12.2= 1.12.3= 1.12.5= 1.13.0= 1.13.1= 17.0.4= 17.0.5= 17.03.0= 17.03.1= 17.04.0= 17.06.0= 17.06.1= 17.06.2= 17.07.0= 17.09.0= 17.09.1= 17.10.0= 17.11.0= 17.12.0= 18.01.0= 18.02.0= 18.03.0= 18.03.1= 18.04.0= 18.05.0 |
HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users" group (who may not otherwise have administrator access) to escalate to administrator privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free