Docker Container Escape Vulnerability in Play With Docker Software
CVE-2023-34844

9.8CRITICAL

Key Information:

Vendor

Play With Docker Project

Status
Play With Docker
Vendor
CVE Published:
29 June 2023

What is CVE-2023-34844?

The Play With Docker software version prior to 0.0.2 contains a significant vulnerability due to the use of the CAP_SYS_ADMIN privileged mode. This configuration flaw enables an attacker to escape the confines of a docker container, potentially leading to unauthorized access to the host system and its services. As a result, systems using affected versions of Play With Docker are at risk of severe security breaches, necessitating immediate updates or mitigation efforts.

References

https://hacku.top/wl/?id=MACBtnorZyp6hC3E5bw2CqBAusuWoKe3

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2023-34844 : Docker Container Escape Vulnerability in Play With Docker Software