CVE-2020-14298

Katalog CVE

CVSS 8.8 · High EPSS 0,32%

Kerentanan Improper Check for Dropped Privileges pada docker, redhat openshift container platform +1 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.

Rincian

Terbit di NVD

13 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-273: Improper Check for Dropped Privileges

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 23,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHBA-2020:0427 advisory vendor
• https://access.redhat.com/security/cve/CVE-2020-14298 advisory vendor
• https://access.redhat.com/security/vulnerabilities/runcescape advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-5736 issue tracking · patch · advisory vendor