Escape Sequence Injection Vulnerability in Docker Machine by Docker

CVE-2023-40453

What is CVE-2023-40453?

An escape sequence injection vulnerability exists in Docker Machine prior to version 0.16.2. This flaw allows an attacker with control of a worker node to manipulate version data. Such an attack could mislead an administrator into performing unsafe actions or trigger a denial of service on a bastion node due to excessive data size. It's important to note that this vulnerability affects only unsupported versions of the product, underscoring the need for users to maintain updated and supported software.

References