Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in docker ausnutzen, um beliebigen Programmcode auszuführen.
Product
Docker ist eine Open-Source-Software, die dazu verwendet werden kann, Anwendungen mithilfe von Betriebssystemvirtualisierung in Containern zu isolieren.
Vulnerabilities 2
-
Critical 9.0
A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.
A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.
-
High 8.9
A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.
A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.
Revision history
-
#1
Initiale Fassung
References
-
Docker Release 4.34.2 vom 2024-09-12
https://docs.docker.com/desktop/release-notes/#4342