CVE-2020-13401

Published: Jun 2, 2020Modified: Jun 17, 2026

6.0

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Exploitability: 1.8 / Impact: 3.7

Source: NVD

Description

An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.

Affected (5)

Products: Docker: Engine · Fedoraproject: Fedora · Debian: Debian Linux · +1 more

Show all products

Docker: Engine · Fedoraproject: Fedora · Debian: Debian Linux · Broadcom: Sannav

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Docker Engine	Before 19.03.11

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 31
Fedoraproject Fedora	Version 32

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Broadcom Sannav	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (18)

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00040.html

Source: cve@mitre.org

Broken Link

http://www.openwall.com/lists/oss-security/2020/06/01/5

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://docs.docker.com/engine/release-notes/

Source: cve@mitre.org

Release NotesVendor Advisory

https://github.com/docker/docker-ce/releases/tag/v19.03.11

Source: cve@mitre.org

Release NotesThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DN4JQAOXBE3XUNK3FD423LHE3K74EMJT/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJZLKRCOJMOGUIJI2AS27BOZS3RBEF3K/

Source: cve@mitre.org

https://security.gentoo.org/glsa/202008-15

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200717-0002/

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2020/dsa-4716

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00040.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.openwall.com/lists/oss-security/2020/06/01/5

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://docs.docker.com/engine/release-notes/

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://github.com/docker/docker-ce/releases/tag/v19.03.11

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DN4JQAOXBE3XUNK3FD423LHE3K74EMJT/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJZLKRCOJMOGUIJI2AS27BOZS3RBEF3K/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202008-15

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200717-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2020/dsa-4716

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.