Lucene search
Redhat.comRH:CVE-2020-13401HistoryJun 01, 2020 - 9:22 p.m.
CVE-2020-13401
2020-06-0121:22:32
redhat.com
access.redhat.com
11
0.002 Low
EPSS
Percentile
61.5%
A flaw was found in Docker when it creates network bridges that accept IPv6 router advertisements by default. This flaw allows an attacker who can execute code in a container to possibly spoof rogue IPv6 router advertisements to perform a man-in-the-middle (MitM) attack against the host network or another container.
Mitigation
Prevent untrusted, non-privileged containers from running with CAP_NET_RAW.
Related
cve
cve
CVE-2020-13401
2020-06-02 14:15:10
fedora
fedora
[SECURITY] Fedora 32 Update: moby-engine-19.03.11-1.ce.git42e35e6.fc32
2020-06-19 01:05:16
[SECURITY] Fedora 31 Update: moby-engine-19.03.11-1.ce.git42e35e6.fc31
2020-06-19 01:07:27
github
github
Improper Input Validation in Docker Engine
2022-02-15 01:57:18
openvas
openvas
openSUSE: Security Advisory for containerd, (openSUSE-SU-2020:0846-1)
2020-06-23 00:00:00
Docker < 19.03.11 IPv6 Spoofing Vulnerability
2020-06-05 00:00:00
Mageia: Security Advisory (MGASA-2020-0279)
2022-01-28 00:00:00
alpinelinux
alpinelinux
CVE-2020-13401
2020-06-02 14:15:10
nessus
nessus
GLSA-202008-15 : Docker: Information disclosure
2020-08-27 00:00:00
Amazon Linux AMI : docker (ALAS-2020-1376)
2020-06-04 00:00:00
githubexploit
githubexploit
Exploit for Improper Input Validation in Docker Engine
2021-03-31 17:45:10
prion
prion
Code injection
2020-06-02 14:15:00
ibm
ibm
osv
osv
CVE-2020-13401
2020-06-02 14:15:10
docker.io - security update
2020-07-02 00:00:00
Improper Input Validation in Docker Engine
2022-02-15 01:57:18
mageia
mageia
Updated docker packages fix security vulnerability
2020-07-05 18:53:52
debiancve
debiancve
CVE-2020-13401
2020-06-02 14:15:10
ubuntucve
ubuntucve
CVE-2020-13401
2020-06-02 00:00:00
cvelist
cvelist
CVE-2020-13401
2020-06-02 13:42:09
debian
debian
[SECURITY] [DSA 4716-1] docker.io security update
2020-07-02 18:41:07
nvd
nvd
CVE-2020-13401
2020-06-02 14:15:10
suse
suse
gentoo
gentoo
Docker: Information disclosure
2020-08-26 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-06-03 05:14:58
amazon
amazon
Important: docker
2020-05-29 21:52:00
oraclelinux
oraclelinux
docker-cli docker-engine security update
2020-06-24 00:00:00
docker-engine docker-cli security update
2020-06-12 00:00:00
docker-cli docker-engine security update
2020-08-24 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0045
2023-07-05 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0041
2023-06-29 00:00:00