Vulnerability in Docker
CVE-2020-14298
The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could al…
EPSS: 0.003 (24.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Docker — versions 1.13.1
- Redhat Enterprise_linux_server — versions 7.0
- Redhat Openshift_container_platform
- N/a Docker — versions Affected version is 1.13.1-108.git4ef4b30.el7 shipped in Red Hat Enterprise Linux 7 Extras
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-14298?
- CVE-2020-14298 is a high-severity vulnerability in Docker, classified under Improper Check for Dropped Privileges. CVSS score: 8.8/10. Published 2020-07-13.
- How severe is CVE-2020-14298?
- High severity. CVSS v3 base score is 8.8 out of 10.