IPv6 Router Advertisement Spoofing in Docker Engine
CVE-2020-13401
6MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2020-13401?
A vulnerability in Docker Engine allows an attacker within a container, equipped with the CAP_NET_RAW capability, to craft malicious IPv6 router advertisements. This exploitation can lead to the spoofing of external IPv6 hosts, allowing the attacker to potentially access sensitive information or disrupt services, resulting in a denial of service.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.