CVE-2020-14298

13.07.2020, 21:15

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
redhat	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 35%

Vendor	Product	Version
docker	docker	1.13.1
redhat	openshift_container_platform	3.0 ≤ 𝑥 ≤ 3.7.61
redhat	enterprise_linux_server	7.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

docker.io

bullseye	20.10.5+dfsg1-1+deb11u2 fixed
bullseye (security)	20.10.5+dfsg1-1+deb11u3 fixed
bookworm	20.10.24+dfsg1-1 fixed
trixie	26.1.5+dfsg1-2 fixed
sid	26.1.5+dfsg1-4 fixed

Ubuntu Releases

Ubuntu Product

Codename

docker.io

focal	not-affected
eoan	not-affected
bionic	not-affected
xenial	not-affected
trusty	dne

Common Weakness Enumeration

CWE-273 - Improper Check for Dropped Privileges
The software attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.

References

https://access.redhat.com/errata/RHBA-2020:0427

https://access.redhat.com/security/cve/CVE-2020-14298

https://access.redhat.com/security/vulnerabilities/runcescape

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-5736

https://access.redhat.com/errata/RHBA-2020:0427

https://access.redhat.com/security/cve/CVE-2020-14298

https://access.redhat.com/security/vulnerabilities/runcescape

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-5736