Read the docs
TI-2024-05248 Aliases CVE-2024-5652GHSA-gwjv-qxvj-5x3w

Uncontrolled resource consumption in Docker Desktop

Priority LOW 27CWE-400Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · Low · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00374 31st percentileScored 2026-11-07
Fix Fixed Docker Desktop (Docker Inc.): v4.31.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DockerDocker Desktopbefore v4.31.0v4.31.0Patch availableCNA
  • Docker Desktop VendorDocker Affected before v4.31.0 Fixed in v4.31.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:docker:desktop:*:*:*:*:*:windows:*:*before 4.31.0VulnerableDocker
  • cpe:2.3:a:docker:desktop:*:*:*:*:*:windows:*:* Versions before 4.31.0 Vulnerable ·Docker

Remediation

  • Fix · CNA Docker Desktop (Docker Inc.) Fixed in v4.31.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-5652
  2. 2026-10-03 Alias added: GHSA-gwjv-qxvj-5x3w

References

Other 1

  • TI-2025-02823 Elevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion CVSS 4.0HIGH 7.3
  • TI-2024-08066 Cross-site scripting in Docker Desktop CVSS 4.0HIGH 8.9
  • TI-2024-08065 Cross-site scripting in Docker Desktop CVSS 4.0CRITICAL 9.0
  • TI-2022-17400 Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file… CVSS 3.1HIGH 7.8
  • TI-2021-15651 Docker Desktop before 3.6.0 suffers from incorrect access control. CVSS 3.1HIGH 7.8
  • TI-2024-05770 In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop… CVSS 4.0HIGH 7.3
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences