CVEvulnerability

CVE-2018-15514

8.8 HIGH Published 2018-09-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-502

Description

HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users" group (who may not otherwise have administrator access) to escalate to administrator privileges.

Affected configurations

• docker docker 1.10.0.0-0 • docker docker 1.10.1.42-1 • docker docker 1.10.2.12 • docker docker 1.10.2.14 • docker docker 1.10.4.0 • docker docker 1.10.6 • docker docker 1.11.0 • docker docker 1.11.1 • docker docker 1.11.2 • docker docker 1.12.0 • docker docker 1.12.1 • docker docker 1.12.2 • docker docker 1.12.3 • docker docker 1.12.5 • docker docker 1.13.0 • docker docker 1.13.1 • docker docker 17.0.4 • docker docker 17.0.5 • docker docker 17.03.0 • docker docker 17.03.1 • docker docker 17.04.0 • docker docker 17.06.0 • docker docker 17.06.1 • docker docker 17.06.2 • docker docker 17.07.0 • docker docker 17.09.0 • docker docker 17.09.1 • docker docker 17.10.0 • docker docker 17.11.0 • docker docker 17.12.0 • docker docker 18.01.0 • docker docker 18.02.0 • docker docker 18.03.0 • docker docker 18.03.1 • docker docker 18.04.0 • docker docker 18.05.0

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References