CVE-2020-13401

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 19.03.11

Description The issue is related to a lack of input validation in the CAP NET RAW component of Docker Engine, which can be exploited by a remote attacker to gain access to sensitive information, compromise data integrity, and cause a denial of service. An attacker with the CAP NET RAW capability in a container can craft IPv6 router advertisements to spoof external IPv6 hosts.

Recommendations For Docker Engine versions prior to 19.03.11, update to version 19.03.11 or later to resolve the issue. As a temporary workaround, consider restricting the use of the CAP NET RAW capability in containers to minimize the risk of exploitation.