Read the docs
TI-2018-11067 Aliases CVE-2018-15514GHSA-332v-39cw-qwg2

HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before…

Priority MEDIUM 43CWE-502Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-502.

Summary

HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users" group (who may not otherwise have administrator access) to escalate to administrator privileges.

Why it matters now

EPSS 0.02435 84th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 104

CPEVersionsRoleVendor
cpe:2.3:a:docker:docker:1.10.0.0-0:*:*:*:community:windows:*:*1.10.0.0-0VulnerableDocker
cpe:2.3:a:docker:docker:1.10.1.42-1:*:*:*:community:windows:*:*1.10.1.42-1VulnerableDocker
cpe:2.3:a:docker:docker:1.10.2.12:*:*:*:community:windows:*:*1.10.2.12VulnerableDocker
cpe:2.3:a:docker:docker:1.10.2.14:*:*:*:community:windows:*:*1.10.2.14VulnerableDocker
cpe:2.3:a:docker:docker:1.10.4.0:*:*:*:community:windows:*:*1.10.4.0VulnerableDocker
cpe:2.3:a:docker:docker:1.10.6:*:*:*:community:windows:*:*1.10.6VulnerableDocker
cpe:2.3:a:docker:docker:1.11.0:*:*:*:community:windows:*:*1.11.0VulnerableDocker
cpe:2.3:a:docker:docker:1.11.0:beta10:*:*:community:windows:*:*1.11.0 beta10VulnerableDocker
cpe:2.3:a:docker:docker:1.11.0:beta7:*:*:community:windows:*:*1.11.0 beta7VulnerableDocker
cpe:2.3:a:docker:docker:1.11.0:beta8:*:*:community:windows:*:*1.11.0 beta8VulnerableDocker
  • cpe:2.3:a:docker:docker:1.10.0.0-0:*:*:*:community:windows:*:* Versions 1.10.0.0-0 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.10.1.42-1:*:*:*:community:windows:*:* Versions 1.10.1.42-1 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.10.2.12:*:*:*:community:windows:*:* Versions 1.10.2.12 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.10.2.14:*:*:*:community:windows:*:* Versions 1.10.2.14 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.10.4.0:*:*:*:community:windows:*:* Versions 1.10.4.0 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.10.6:*:*:*:community:windows:*:* Versions 1.10.6 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.11.0:*:*:*:community:windows:*:* Versions 1.11.0 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.11.0:beta10:*:*:community:windows:*:* Versions 1.11.0 beta10 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.11.0:beta7:*:*:community:windows:*:* Versions 1.11.0 beta7 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.11.0:beta8:*:*:community:windows:*:* Versions 1.11.0 beta8 Vulnerable ·Docker
Show 94 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:docker:docker:1.11.0:beta9:*:*:community:windows:*:*1.11.0 beta9VulnerableDocker
cpe:2.3:a:docker:docker:1.11.1:beta11:*:*:community:windows:*:*1.11.1 beta11VulnerableDocker
cpe:2.3:a:docker:docker:1.11.1:beta11b:*:*:community:windows:*:*1.11.1 beta11bVulnerableDocker
cpe:2.3:a:docker:docker:1.11.1:beta12:*:*:community:windows:*:*1.11.1 beta12VulnerableDocker
cpe:2.3:a:docker:docker:1.11.1:beta13:*:*:community:windows:*:*1.11.1 beta13VulnerableDocker
cpe:2.3:a:docker:docker:1.11.1:beta14:*:*:community:windows:*:*1.11.1 beta14VulnerableDocker
cpe:2.3:a:docker:docker:1.11.2:beta15:*:*:community:windows:*:*1.11.2 beta15VulnerableDocker
cpe:2.3:a:docker:docker:1.12.0:*:*:*:*:windows:*:*1.12.0VulnerableDocker
cpe:2.3:a:docker:docker:1.12.0:beta21:*:*:community:windows:*:*1.12.0 beta21VulnerableDocker
cpe:2.3:a:docker:docker:1.12.0:beta22:*:*:community:windows:*:*1.12.0 beta22VulnerableDocker
cpe:2.3:a:docker:docker:1.12.0:rc2-beta16:*:*:community:windows:*:*1.12.0 rc2-beta16VulnerableDocker
cpe:2.3:a:docker:docker:1.12.0:rc2-beta17:*:*:community:windows:*:*1.12.0 rc2-beta17VulnerableDocker
cpe:2.3:a:docker:docker:1.12.0:rc3-beta18:*:*:community:windows:*:*1.12.0 rc3-beta18VulnerableDocker
cpe:2.3:a:docker:docker:1.12.0:rc3-beta18.1:*:*:community:windows:*:*1.12.0 rc3-beta18.1VulnerableDocker
cpe:2.3:a:docker:docker:1.12.0:rc4-beta19:*:*:community:windows:*:*1.12.0 rc4-beta19VulnerableDocker
cpe:2.3:a:docker:docker:1.12.0:rc4-beta20:*:*:community:windows:*:*1.12.0 rc4-beta20VulnerableDocker
cpe:2.3:a:docker:docker:1.12.1:*:*:*:*:windows:*:*1.12.1VulnerableDocker
cpe:2.3:a:docker:docker:1.12.1:beta24:*:*:community:windows:*:*1.12.1 beta24VulnerableDocker
cpe:2.3:a:docker:docker:1.12.1:beta25:*:*:community:windows:*:*1.12.1 beta25VulnerableDocker
cpe:2.3:a:docker:docker:1.12.1:beta26:*:*:community:windows:*:*1.12.1 beta26VulnerableDocker
cpe:2.3:a:docker:docker:1.12.1:beta29.1:*:*:community:windows:*:*1.12.1 beta29.1VulnerableDocker
cpe:2.3:a:docker:docker:1.12.1:rc1-beta23:*:*:community:windows:*:*1.12.1 rc1-beta23VulnerableDocker
cpe:2.3:a:docker:docker:1.12.2:beta29.2:*:*:community:windows:*:*1.12.2 beta29.2VulnerableDocker
cpe:2.3:a:docker:docker:1.12.2:rc1-beta27:*:*:community:windows:*:*1.12.2 rc1-beta27VulnerableDocker
cpe:2.3:a:docker:docker:1.12.2:rc3-beta28:*:*:community:windows:*:*1.12.2 rc3-beta28VulnerableDocker
cpe:2.3:a:docker:docker:1.12.3:*:*:*:*:windows:*:*1.12.3VulnerableDocker
cpe:2.3:a:docker:docker:1.12.3:beta29.3:*:*:community:windows:*:*1.12.3 beta29.3VulnerableDocker
cpe:2.3:a:docker:docker:1.12.3:beta30:*:*:community:windows:*:*1.12.3 beta30VulnerableDocker
cpe:2.3:a:docker:docker:1.12.3:rc1-beta29:*:*:community:windows:*:*1.12.3 rc1-beta29VulnerableDocker
cpe:2.3:a:docker:docker:1.12.5:*:*:*:*:windows:*:*1.12.5VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:*:*:*:*:windows:*:*1.13.0VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:beta38:*:*:community:windows:*:*1.13.0 beta38VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:beta39:*:*:community:windows:*:*1.13.0 beta39VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:rc2-beta31:*:*:community:windows:*:*1.13.0 rc2-beta31VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:rc3-beta32:*:*:community:windows:*:*1.13.0 rc3-beta32VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:rc3-beta32.1:*:*:community:windows:*:*1.13.0 rc3-beta32.1VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:rc3-beta33:*:*:community:windows:*:*1.13.0 rc3-beta33VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:rc4-beta34:*:*:community:windows:*:*1.13.0 rc4-beta34VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:rc5-beta35:*:*:community:windows:*:*1.13.0 rc5-beta35VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:rc6-beta36:*:*:community:windows:*:*1.13.0 rc6-beta36VulnerableDocker
cpe:2.3:a:docker:docker:1.13.0:rc7-beta37:*:*:community:windows:*:*1.13.0 rc7-beta37VulnerableDocker
cpe:2.3:a:docker:docker:1.13.1:*:*:*:*:windows:*:*1.13.1VulnerableDocker
cpe:2.3:a:docker:docker:1.13.1:rc1-beta40:*:*:community:windows:*:*1.13.1 rc1-beta40VulnerableDocker
cpe:2.3:a:docker:docker:1.13.1:rc2-beta41:*:*:community:windows:*:*1.13.1 rc2-beta41VulnerableDocker
cpe:2.3:a:docker:docker:17.0.4:win7:*:*:community:windows:*:*17.0.4 win7VulnerableDocker
cpe:2.3:a:docker:docker:17.0.5:win9:*:*:community:windows:*:*17.0.5 win9VulnerableDocker
cpe:2.3:a:docker:docker:17.03.0:*:*:*:community:windows:*:*17.03.0VulnerableDocker
cpe:2.3:a:docker:docker:17.03.0:rc1-win1:*:*:community:windows:*:*17.03.0 rc1-win1VulnerableDocker
cpe:2.3:a:docker:docker:17.03.1:win12:*:*:community:windows:*:*17.03.1 win12VulnerableDocker
cpe:2.3:a:docker:docker:17.04.0:win6:*:*:community:windows:*:*17.04.0 win6VulnerableDocker
cpe:2.3:a:docker:docker:17.06.0:win13:*:*:community:windows:*:*17.06.0 win13VulnerableDocker
cpe:2.3:a:docker:docker:17.06.0:win14:*:*:community:windows:*:*17.06.0 win14VulnerableDocker
cpe:2.3:a:docker:docker:17.06.0:win15:*:*:community:windows:*:*17.06.0 win15VulnerableDocker
cpe:2.3:a:docker:docker:17.06.0:win16:*:*:community:windows:*:*17.06.0 win16VulnerableDocker
cpe:2.3:a:docker:docker:17.06.0:win17:*:*:community:windows:*:*17.06.0 win17VulnerableDocker
cpe:2.3:a:docker:docker:17.06.0:win18:*:*:community:windows:*:*17.06.0 win18VulnerableDocker
cpe:2.3:a:docker:docker:17.06.1:rc1-win20:*:*:community:windows:*:*17.06.1 rc1-win20VulnerableDocker
cpe:2.3:a:docker:docker:17.06.1:rc1-win24:*:*:community:windows:*:*17.06.1 rc1-win24VulnerableDocker
cpe:2.3:a:docker:docker:17.06.2:win27:*:*:community:windows:*:*17.06.2 win27VulnerableDocker
cpe:2.3:a:docker:docker:17.07.0:rc1-win21:*:*:community:windows:*:*17.07.0 rc1-win21VulnerableDocker
cpe:2.3:a:docker:docker:17.07.0:rc2-win22:*:*:community:windows:*:*17.07.0 rc2-win22VulnerableDocker
cpe:2.3:a:docker:docker:17.07.0:rc3-win23:*:*:community:windows:*:*17.07.0 rc3-win23VulnerableDocker
cpe:2.3:a:docker:docker:17.07.0:rc4-win25:*:*:community:windows:*:*17.07.0 rc4-win25VulnerableDocker
cpe:2.3:a:docker:docker:17.07.0:win26:*:*:community:windows:*:*17.07.0 win26VulnerableDocker
cpe:2.3:a:docker:docker:17.09.0:rc1-win28:*:*:community:windows:*:*17.09.0 rc1-win28VulnerableDocker
cpe:2.3:a:docker:docker:17.09.0:rc2-win29:*:*:community:windows:*:*17.09.0 rc2-win29VulnerableDocker
cpe:2.3:a:docker:docker:17.09.0:rc3-win30:*:*:community:windows:*:*17.09.0 rc3-win30VulnerableDocker
cpe:2.3:a:docker:docker:17.09.0:win31:*:*:community:windows:*:*17.09.0 win31VulnerableDocker
cpe:2.3:a:docker:docker:17.09.0:win32:*:*:community:windows:*:*17.09.0 win32VulnerableDocker
cpe:2.3:a:docker:docker:17.09.0:win33:*:*:community:windows:*:*17.09.0 win33VulnerableDocker
cpe:2.3:a:docker:docker:17.09.0:win34:*:*:community:windows:*:*17.09.0 win34VulnerableDocker
cpe:2.3:a:docker:docker:17.09.1:win42:*:*:community:windows:*:*17.09.1 win42VulnerableDocker
cpe:2.3:a:docker:docker:17.10.0:win36:*:*:community:windows:*:*17.10.0 win36VulnerableDocker
cpe:2.3:a:docker:docker:17.11.0:rc2-win37:*:*:community:windows:*:*17.11.0 rc2-win37VulnerableDocker
cpe:2.3:a:docker:docker:17.11.0:rc3-win38:*:*:community:windows:*:*17.11.0 rc3-win38VulnerableDocker
cpe:2.3:a:docker:docker:17.11.0:rc4-win39:*:*:community:windows:*:*17.11.0 rc4-win39VulnerableDocker
cpe:2.3:a:docker:docker:17.11.0:win40:*:*:community:windows:*:*17.11.0 win40VulnerableDocker
cpe:2.3:a:docker:docker:17.12.0:rc2-win41:*:*:community:windows:*:*17.12.0 rc2-win41VulnerableDocker
cpe:2.3:a:docker:docker:17.12.0:rc3-win43:*:*:community:windows:*:*17.12.0 rc3-win43VulnerableDocker
cpe:2.3:a:docker:docker:17.12.0:rc4-win44:*:*:community:windows:*:*17.12.0 rc4-win44VulnerableDocker
cpe:2.3:a:docker:docker:17.12.0:win45:*:*:community:windows:*:*17.12.0 win45VulnerableDocker
cpe:2.3:a:docker:docker:17.12.0:win46:*:*:community:windows:*:*17.12.0 win46VulnerableDocker
cpe:2.3:a:docker:docker:17.12.0:win47:*:*:community:windows:*:*17.12.0 win47VulnerableDocker
cpe:2.3:a:docker:docker:18.01.0:win48:*:*:community:windows:*:*18.01.0 win48VulnerableDocker
cpe:2.3:a:docker:docker:18.02.0:rc1-win50:*:*:community:windows:*:*18.02.0 rc1-win50VulnerableDocker
cpe:2.3:a:docker:docker:18.02.0:rc2-win51:*:*:community:windows:*:*18.02.0 rc2-win51VulnerableDocker
cpe:2.3:a:docker:docker:18.02.0:win52:*:*:community:windows:*:*18.02.0 win52VulnerableDocker
cpe:2.3:a:docker:docker:18.03.0:rc3-win56:*:*:community:windows:*:*18.03.0 rc3-win56VulnerableDocker
cpe:2.3:a:docker:docker:18.03.0:win58:*:*:community:windows:*:*18.03.0 win58VulnerableDocker
cpe:2.3:a:docker:docker:18.03.0:win59:*:*:community:windows:*:*18.03.0 win59VulnerableDocker
cpe:2.3:a:docker:docker:18.03.1:win65:*:*:community:windows:*:*18.03.1 win65VulnerableDocker
cpe:2.3:a:docker:docker:18.04.0:rc2-win61:*:*:community:windows:*:*18.04.0 rc2-win61VulnerableDocker
cpe:2.3:a:docker:docker:18.05.0:rc1-win63:*:*:community:windows:*:*18.05.0 rc1-win63VulnerableDocker
cpe:2.3:a:docker:docker:18.05.0:win66:*:*:community:windows:*:*18.05.0 win66VulnerableDocker
  • cpe:2.3:a:docker:docker:1.11.0:beta9:*:*:community:windows:*:* Versions 1.11.0 beta9 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.11.1:beta11:*:*:community:windows:*:* Versions 1.11.1 beta11 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.11.1:beta11b:*:*:community:windows:*:* Versions 1.11.1 beta11b Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.11.1:beta12:*:*:community:windows:*:* Versions 1.11.1 beta12 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.11.1:beta13:*:*:community:windows:*:* Versions 1.11.1 beta13 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.11.1:beta14:*:*:community:windows:*:* Versions 1.11.1 beta14 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.11.2:beta15:*:*:community:windows:*:* Versions 1.11.2 beta15 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.0:*:*:*:*:windows:*:* Versions 1.12.0 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.0:beta21:*:*:community:windows:*:* Versions 1.12.0 beta21 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.0:beta22:*:*:community:windows:*:* Versions 1.12.0 beta22 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.0:rc2-beta16:*:*:community:windows:*:* Versions 1.12.0 rc2-beta16 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.0:rc2-beta17:*:*:community:windows:*:* Versions 1.12.0 rc2-beta17 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.0:rc3-beta18:*:*:community:windows:*:* Versions 1.12.0 rc3-beta18 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.0:rc3-beta18.1:*:*:community:windows:*:* Versions 1.12.0 rc3-beta18.1 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.0:rc4-beta19:*:*:community:windows:*:* Versions 1.12.0 rc4-beta19 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.0:rc4-beta20:*:*:community:windows:*:* Versions 1.12.0 rc4-beta20 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.1:*:*:*:*:windows:*:* Versions 1.12.1 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.1:beta24:*:*:community:windows:*:* Versions 1.12.1 beta24 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.1:beta25:*:*:community:windows:*:* Versions 1.12.1 beta25 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.1:beta26:*:*:community:windows:*:* Versions 1.12.1 beta26 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.1:beta29.1:*:*:community:windows:*:* Versions 1.12.1 beta29.1 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.1:rc1-beta23:*:*:community:windows:*:* Versions 1.12.1 rc1-beta23 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.2:beta29.2:*:*:community:windows:*:* Versions 1.12.2 beta29.2 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.2:rc1-beta27:*:*:community:windows:*:* Versions 1.12.2 rc1-beta27 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.2:rc3-beta28:*:*:community:windows:*:* Versions 1.12.2 rc3-beta28 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.3:*:*:*:*:windows:*:* Versions 1.12.3 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.3:beta29.3:*:*:community:windows:*:* Versions 1.12.3 beta29.3 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.3:beta30:*:*:community:windows:*:* Versions 1.12.3 beta30 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.3:rc1-beta29:*:*:community:windows:*:* Versions 1.12.3 rc1-beta29 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.12.5:*:*:*:*:windows:*:* Versions 1.12.5 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:*:*:*:*:windows:*:* Versions 1.13.0 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:beta38:*:*:community:windows:*:* Versions 1.13.0 beta38 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:beta39:*:*:community:windows:*:* Versions 1.13.0 beta39 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:rc2-beta31:*:*:community:windows:*:* Versions 1.13.0 rc2-beta31 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:rc3-beta32:*:*:community:windows:*:* Versions 1.13.0 rc3-beta32 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:rc3-beta32.1:*:*:community:windows:*:* Versions 1.13.0 rc3-beta32.1 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:rc3-beta33:*:*:community:windows:*:* Versions 1.13.0 rc3-beta33 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:rc4-beta34:*:*:community:windows:*:* Versions 1.13.0 rc4-beta34 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:rc5-beta35:*:*:community:windows:*:* Versions 1.13.0 rc5-beta35 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:rc6-beta36:*:*:community:windows:*:* Versions 1.13.0 rc6-beta36 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.0:rc7-beta37:*:*:community:windows:*:* Versions 1.13.0 rc7-beta37 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.1:*:*:*:*:windows:*:* Versions 1.13.1 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.1:rc1-beta40:*:*:community:windows:*:* Versions 1.13.1 rc1-beta40 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:1.13.1:rc2-beta41:*:*:community:windows:*:* Versions 1.13.1 rc2-beta41 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.0.4:win7:*:*:community:windows:*:* Versions 17.0.4 win7 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.0.5:win9:*:*:community:windows:*:* Versions 17.0.5 win9 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.03.0:*:*:*:community:windows:*:* Versions 17.03.0 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.03.0:rc1-win1:*:*:community:windows:*:* Versions 17.03.0 rc1-win1 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.03.1:win12:*:*:community:windows:*:* Versions 17.03.1 win12 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.04.0:win6:*:*:community:windows:*:* Versions 17.04.0 win6 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.06.0:win13:*:*:community:windows:*:* Versions 17.06.0 win13 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.06.0:win14:*:*:community:windows:*:* Versions 17.06.0 win14 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.06.0:win15:*:*:community:windows:*:* Versions 17.06.0 win15 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.06.0:win16:*:*:community:windows:*:* Versions 17.06.0 win16 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.06.0:win17:*:*:community:windows:*:* Versions 17.06.0 win17 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.06.0:win18:*:*:community:windows:*:* Versions 17.06.0 win18 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.06.1:rc1-win20:*:*:community:windows:*:* Versions 17.06.1 rc1-win20 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.06.1:rc1-win24:*:*:community:windows:*:* Versions 17.06.1 rc1-win24 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.06.2:win27:*:*:community:windows:*:* Versions 17.06.2 win27 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.07.0:rc1-win21:*:*:community:windows:*:* Versions 17.07.0 rc1-win21 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.07.0:rc2-win22:*:*:community:windows:*:* Versions 17.07.0 rc2-win22 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.07.0:rc3-win23:*:*:community:windows:*:* Versions 17.07.0 rc3-win23 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.07.0:rc4-win25:*:*:community:windows:*:* Versions 17.07.0 rc4-win25 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.07.0:win26:*:*:community:windows:*:* Versions 17.07.0 win26 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.09.0:rc1-win28:*:*:community:windows:*:* Versions 17.09.0 rc1-win28 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.09.0:rc2-win29:*:*:community:windows:*:* Versions 17.09.0 rc2-win29 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.09.0:rc3-win30:*:*:community:windows:*:* Versions 17.09.0 rc3-win30 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.09.0:win31:*:*:community:windows:*:* Versions 17.09.0 win31 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.09.0:win32:*:*:community:windows:*:* Versions 17.09.0 win32 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.09.0:win33:*:*:community:windows:*:* Versions 17.09.0 win33 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.09.0:win34:*:*:community:windows:*:* Versions 17.09.0 win34 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.09.1:win42:*:*:community:windows:*:* Versions 17.09.1 win42 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.10.0:win36:*:*:community:windows:*:* Versions 17.10.0 win36 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.11.0:rc2-win37:*:*:community:windows:*:* Versions 17.11.0 rc2-win37 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.11.0:rc3-win38:*:*:community:windows:*:* Versions 17.11.0 rc3-win38 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.11.0:rc4-win39:*:*:community:windows:*:* Versions 17.11.0 rc4-win39 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.11.0:win40:*:*:community:windows:*:* Versions 17.11.0 win40 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.12.0:rc2-win41:*:*:community:windows:*:* Versions 17.12.0 rc2-win41 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.12.0:rc3-win43:*:*:community:windows:*:* Versions 17.12.0 rc3-win43 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.12.0:rc4-win44:*:*:community:windows:*:* Versions 17.12.0 rc4-win44 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.12.0:win45:*:*:community:windows:*:* Versions 17.12.0 win45 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.12.0:win46:*:*:community:windows:*:* Versions 17.12.0 win46 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:17.12.0:win47:*:*:community:windows:*:* Versions 17.12.0 win47 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.01.0:win48:*:*:community:windows:*:* Versions 18.01.0 win48 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.02.0:rc1-win50:*:*:community:windows:*:* Versions 18.02.0 rc1-win50 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.02.0:rc2-win51:*:*:community:windows:*:* Versions 18.02.0 rc2-win51 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.02.0:win52:*:*:community:windows:*:* Versions 18.02.0 win52 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.03.0:rc3-win56:*:*:community:windows:*:* Versions 18.03.0 rc3-win56 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.03.0:win58:*:*:community:windows:*:* Versions 18.03.0 win58 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.03.0:win59:*:*:community:windows:*:* Versions 18.03.0 win59 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.03.1:win65:*:*:community:windows:*:* Versions 18.03.1 win65 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.04.0:rc2-win61:*:*:community:windows:*:* Versions 18.04.0 rc2-win61 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.05.0:rc1-win63:*:*:community:windows:*:* Versions 18.05.0 rc1-win63 Vulnerable ·Docker
  • cpe:2.3:a:docker:docker:18.05.0:win66:*:*:community:windows:*:* Versions 18.05.0 win66 Vulnerable ·Docker

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-15514
  2. 2026-10-03 Alias added: GHSA-332v-39cw-qwg2

References

Exploit 1

Advisory 2

  • TI-2019-11833 Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by… KEVCVSS 3.1HIGH 7.8
  • TI-2019-04061 runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows… CVSS 3.1HIGH 8.6
  • TI-2019-10626 In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code… CVSS 3.1CRITICAL 9.8
  • TI-2014-07591 Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a… CVSS 2.0HIGH 10.0
  • TI-2014-00046 Improper input validation in docker.io CVSS 3.1CRITICAL 9.8
  • TI-2014-07590 Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to… CVSS 3.1HIGH 8.6
See all 36 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences