CVE-2018-15514

Published: Sep 1, 2018Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users" group (who may not otherwise have administrator access) to escalate to administrator privileges.

Affected (104)

Products: Docker: Docker

Docker

1 product

Docker

Configuration A

104 vulnerable

Vulnerable Software	Affected Versions
Docker Docker	Version 1.10.0.0-0
Docker Docker	Version 1.10.1.42-1
Docker Docker	Version 1.10.2.12
Docker Docker	Version 1.10.2.14
Docker Docker	Version 1.10.4.0
Docker Docker	Version 1.10.6
Docker Docker	Version 1.11.0
Docker Docker	Version 1.11.0 beta10
Docker Docker	Version 1.11.0 beta7
Docker Docker	Version 1.11.0 beta8
Docker Docker	Version 1.11.0 beta9
Docker Docker	Version 1.11.1 beta11
Docker Docker	Version 1.11.1 beta11b
Docker Docker	Version 1.11.1 beta12
Docker Docker	Version 1.11.1 beta13
Docker Docker	Version 1.11.1 beta14
Docker Docker	Version 1.11.2 beta15
Docker Docker	Version 1.12.0
Docker Docker	Version 1.12.0 beta21
Docker Docker	Version 1.12.0 beta22
Docker Docker	Version 1.12.0 rc2-beta16
Docker Docker	Version 1.12.0 rc2-beta17
Docker Docker	Version 1.12.0 rc3-beta18.1
Docker Docker	Version 1.12.0 rc3-beta18
Docker Docker	Version 1.12.0 rc4-beta19
Docker Docker	Version 1.12.0 rc4-beta20
Docker Docker	Version 1.12.1
Docker Docker	Version 1.12.1 beta24
Docker Docker	Version 1.12.1 beta25
Docker Docker	Version 1.12.1 beta26
Docker Docker	Version 1.12.1 beta29.1
Docker Docker	Version 1.12.1 rc1-beta23
Docker Docker	Version 1.12.2 beta29.2
Docker Docker	Version 1.12.2 rc1-beta27
Docker Docker	Version 1.12.2 rc3-beta28
Docker Docker	Version 1.12.3
Docker Docker	Version 1.12.3 beta29.3
Docker Docker	Version 1.12.3 beta30
Docker Docker	Version 1.12.3 rc1-beta29
Docker Docker	Version 1.12.5
Docker Docker	Version 1.13.0
Docker Docker	Version 1.13.0 beta38
Docker Docker	Version 1.13.0 beta39
Docker Docker	Version 1.13.0 rc2-beta31
Docker Docker	Version 1.13.0 rc3-beta32.1
Docker Docker	Version 1.13.0 rc3-beta32
Docker Docker	Version 1.13.0 rc3-beta33
Docker Docker	Version 1.13.0 rc4-beta34
Docker Docker	Version 1.13.0 rc5-beta35
Docker Docker	Version 1.13.0 rc6-beta36
Docker Docker	Version 1.13.0 rc7-beta37
Docker Docker	Version 1.13.1
Docker Docker	Version 1.13.1 rc1-beta40
Docker Docker	Version 1.13.1 rc2-beta41
Docker Docker	Version 17.0.4 win7
Docker Docker	Version 17.0.5 win9
Docker Docker	Version 17.03.0
Docker Docker	Version 17.03.0 rc1-win1
Docker Docker	Version 17.03.1 win12
Docker Docker	Version 17.04.0 win6
Docker Docker	Version 17.06.0 win13
Docker Docker	Version 17.06.0 win14
Docker Docker	Version 17.06.0 win15
Docker Docker	Version 17.06.0 win16
Docker Docker	Version 17.06.0 win17
Docker Docker	Version 17.06.0 win18
Docker Docker	Version 17.06.1 rc1-win20
Docker Docker	Version 17.06.1 rc1-win24
Docker Docker	Version 17.06.2 win27
Docker Docker	Version 17.07.0 rc1-win21
Docker Docker	Version 17.07.0 rc2-win22
Docker Docker	Version 17.07.0 rc3-win23
Docker Docker	Version 17.07.0 rc4-win25
Docker Docker	Version 17.07.0 win26
Docker Docker	Version 17.09.0 rc1-win28
Docker Docker	Version 17.09.0 rc2-win29
Docker Docker	Version 17.09.0 rc3-win30
Docker Docker	Version 17.09.0 win31
Docker Docker	Version 17.09.0 win32
Docker Docker	Version 17.09.0 win33
Docker Docker	Version 17.09.0 win34
Docker Docker	Version 17.09.1 win42
Docker Docker	Version 17.10.0 win36
Docker Docker	Version 17.11.0 rc2-win37
Docker Docker	Version 17.11.0 rc3-win38
Docker Docker	Version 17.11.0 rc4-win39
Docker Docker	Version 17.11.0 win40
Docker Docker	Version 17.12.0 rc2-win41
Docker Docker	Version 17.12.0 rc3-win43
Docker Docker	Version 17.12.0 rc4-win44
Docker Docker	Version 17.12.0 win45
Docker Docker	Version 17.12.0 win46
Docker Docker	Version 17.12.0 win47
Docker Docker	Version 18.01.0 win48
Docker Docker	Version 18.02.0 rc1-win50
Docker Docker	Version 18.02.0 rc2-win51
Docker Docker	Version 18.02.0 win52
Docker Docker	Version 18.03.0 rc3-win56
Docker Docker	Version 18.03.0 win58
Docker Docker	Version 18.03.0 win59
Docker Docker	Version 18.03.1 win65
Docker Docker	Version 18.04.0 rc2-win61
Docker Docker	Version 18.05.0 rc1-win63
Docker Docker	Version 18.05.0 win66