8.8

CVE-2018-15514

Exploit
HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users" group (who may not otherwise have administrator access) to escalate to administrator privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Docker ≫ Docker Version 1.10.0.0-0 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.10.1.42-1 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.10.2.12 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.10.2.14 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.10.4.0 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.10.6 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.0 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.0 Update beta10 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.0 Update beta7 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.0 Update beta8 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.0 Update beta9 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.1 Update beta11 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.1 Update beta11b SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.1 Update beta12 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.1 Update beta13 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.1 Update beta14 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.11.2 Update beta15 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.0 SwPlatform windows
Docker ≫ Docker Version 1.12.0 Update beta21 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.0 Update beta22 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.0 Update rc2-beta16 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.0 Update rc2-beta17 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.0 Update rc3-beta18 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.0 Update rc3-beta18.1 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.0 Update rc4-beta19 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.0 Update rc4-beta20 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.1 SwPlatform windows
Docker ≫ Docker Version 1.12.1 Update beta24 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.1 Update beta25 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.1 Update beta26 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.1 Update beta29.1 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.1 Update rc1-beta23 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.2 Update beta29.2 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.2 Update rc1-beta27 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.2 Update rc3-beta28 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.3 SwPlatform windows
Docker ≫ Docker Version 1.12.3 Update beta29.3 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.3 Update beta30 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.3 Update rc1-beta29 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.12.5 SwPlatform windows
Docker ≫ Docker Version 1.13.0 SwPlatform windows
Docker ≫ Docker Version 1.13.0 Update beta38 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.0 Update beta39 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.0 Update rc2-beta31 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.0 Update rc3-beta32 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.0 Update rc3-beta32.1 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.0 Update rc3-beta33 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.0 Update rc4-beta34 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.0 Update rc5-beta35 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.0 Update rc6-beta36 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.0 Update rc7-beta37 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.1 SwPlatform windows
Docker ≫ Docker Version 1.13.1 Update rc1-beta40 SwEdition community SwPlatform windows
Docker ≫ Docker Version 1.13.1 Update rc2-beta41 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.0.4 Update win7 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.0.5 Update win9 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.03.0 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.03.0 Update rc1-win1 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.03.1 Update win12 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.04.0 Update win6 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.06.0 Update win13 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.06.0 Update win14 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.06.0 Update win15 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.06.0 Update win16 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.06.0 Update win17 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.06.0 Update win18 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.06.1 Update rc1-win20 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.06.1 Update rc1-win24 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.06.2 Update win27 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.07.0 Update rc1-win21 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.07.0 Update rc2-win22 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.07.0 Update rc3-win23 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.07.0 Update rc4-win25 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.07.0 Update win26 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.09.0 Update rc1-win28 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.09.0 Update rc2-win29 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.09.0 Update rc3-win30 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.09.0 Update win31 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.09.0 Update win32 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.09.0 Update win33 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.09.0 Update win34 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.09.1 Update win42 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.10.0 Update win36 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.11.0 Update rc2-win37 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.11.0 Update rc3-win38 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.11.0 Update rc4-win39 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.11.0 Update win40 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.12.0 Update rc2-win41 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.12.0 Update rc3-win43 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.12.0 Update rc4-win44 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.12.0 Update win45 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.12.0 Update win46 SwEdition community SwPlatform windows
Docker ≫ Docker Version 17.12.0 Update win47 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.01.0 Update win48 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.02.0 Update rc1-win50 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.02.0 Update rc2-win51 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.02.0 Update win52 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.03.0 Update rc3-win56 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.03.0 Update win58 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.03.0 Update win59 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.03.1 Update win65 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.04.0 Update rc2-win61 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.05.0 Update rc1-win63 SwEdition community SwPlatform windows
Docker ≫ Docker Version 18.05.0 Update win66 SwEdition community SwPlatform windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.47% 0.824
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

http://www.securityfocus.com/bid/105202
Third Party Advisory
VDB Entry
https://docs.docker.com/docker-for-windows/edge-release-notes/
Vendor Advisory
https://docs.docker.com/docker-for-windows/release-notes/
Vendor Advisory
https://srcincite.io/blog/2018/08/31/you-cant-contain-me-analyzing-and-exploiting-an-elevation-of-privilege-in-docker-for-windows.html
Third Party Advisory
Exploit