CVE-2018-15514

概要

参考情報

• securityfocus.com/bid/105202 · Third Party Advisory
• docs.docker.com/docker-for-windows/edge-release-notes · Vendor Advisory
• docs.docker.com/docker-for-windows/release-notes · Vendor Advisory
• srcincite.io/blog/2018/08/31/you-cant-contain-me-analyzing-and-exploiting-an-elevation-of-privilege-in-docker-for-windows.html · Exploit

docker のその他の脆弱性

• CVE-2022-25365高 7.8Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CV…
• CVE-2021-21285中 6.5In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashe…
• CVE-2021-21284中 6.8In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root all…
• CVE-2021-3162高 7.8Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation.
• CVE-2020-27534中 5.3util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathna…