Docker Desktop Fixes Container Breakout Vulnerability in v4.29.0
CVE-2024-6222
Key Information:
- Vendor
Docker Inc.
- Status
- Vendor
- CVE Published:
- 9 July 2024
Badges
What is CVE-2024-6222?
The first article discusses a vulnerability in Docker Desktop that allows an attacker to escape to the host from the Docker Desktop VM through a container breakout. The vulnerability has been fixed in version 4.29.0 with additional changes in version 4.31.0. The impact is medium and affects Linux, MacOS X, and Windows operating systems. Users are advised to update to the latest version of Docker Desktop to mitigate the risk.
The second article also addresses the same vulnerability in Docker and provides information on the affected operating systems and products. It emphasizes the importance of keeping the application up to date and provides links to further information on updates, patches, and workarounds. The severity of the vulnerability is medium, and it warns users to consult the listed sources for information on the latest software version and security patches.
Affected Version(s)
Docker Desktop Windows 0
News Articles
docker gefährdet: Neue Sicherheitslücke! Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Für docker liegt eine aktuelle IT-Sicherheitswarnung vor. Um welche Schwachstelle es sich handelt, welche Produkte betroffen sind und was Sie tun können, erfahren Sie hier.
References
CVSS V3.1
Timeline
- 👾
Exploit known to exist
- 📰
First article discovered by News.de
Vulnerability published