バージョンを確認する
docker --version影響を受けるバージョン系列
- 20.10 CVE 2 件 サポート終了（EOL）
- 20.0 CVE 2 件
- 19.03 CVE 5 件 サポート終了（EOL）
- 18.09 CVE 7 件 サポート終了（EOL）
- 18.06 CVE 8 件 サポート終了（EOL）
- 18.05 CVE 9 件 サポート終了（EOL）
- 18.04 CVE 9 件 サポート終了（EOL）
- 18.03 CVE 10 件 サポート終了（EOL）
- 18.02 CVE 10 件 サポート終了（EOL）
- 18.01 CVE 10 件 サポート終了（EOL）
- 17.12 CVE 10 件 サポート終了（EOL）
- 17.11 CVE 10 件 サポート終了（EOL）
- 17.10 CVE 10 件 サポート終了（EOL）
- 17.09 CVE 11 件 サポート終了（EOL）
- 17.07 CVE 10 件 サポート終了（EOL）
- 17.06 CVE 11 件 サポート終了（EOL）
- 17.04 CVE 9 件 サポート終了（EOL）
- 17.03 CVE 10 件 サポート終了（EOL）
- 17.0 CVE 9 件
- 4.5 CVE 9 件
- 2.5 CVE 10 件
- 2.1 CVE 11 件 KEV 1
- 1.13 CVE 14 件 KEV 1
- 1.12 CVE 16 件 KEV 1
- 1.11 CVE 14 件 KEV 1
- 1.10 CVE 14 件 KEV 1
- 1.8 CVE 14 件 KEV 1
- 1.6 CVE 14 件 KEV 1
- 1.5 CVE 17 件 KEV 1
- 1.4 CVE 19 件 KEV 1
- 1.3 CVE 25 件 KEV 1
- 1.2 CVE 24 件 KEV 1
- 1.0 CVE 26 件 KEV 1
既知の脆弱性
| CVE | タイトル | 影響を受けるバージョン | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|---|
| CVE-2019-15752 | Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan hors... | < 2.1.0.1 | 7.8 | KEV | 48.8% | 2019-08-29 |
| CVE-2022-25365 | Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists becau... | < 4.5.1 | 7.8 | — | 2022-02-19 | |
| CVE-2021-21284 | privilege escalation in Moby | < 19.03.15 ≥ 20.0.0 < 20.10.3 | 6.8 | — | 2021-02-03 | |
| CVE-2021-21285 | Docker daemon crash during image pull of malicious image | < 19.03.15 ≥ 20.0.0 < 20.10.3 | 6.5 | — | 2021-02-03 | |
| CVE-2021-3162 | Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege e... | < 2.5.0.0 | 7.8 | — | 2021-01-16 | |
| CVE-2020-27534 | util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsa... | < 19.03.9 | 5.3 | — | 2020-12-31 | |
| CVE-2020-14300 | The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras... | = 1.13.1 | 8.8 | — | 2020-07-14 | |
| CVE-2020-14298 | The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included a... | = 1.13.1 | 8.8 | — | 2020-07-14 | |
| CVE-2014-5278 | A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container... | < 1.2.0 | 5.3 | — | 2020-02-08 | |
| CVE-2014-0048 | An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and the... | < 1.5.0 | 9.8 | — | 2020-01-03 | |
| CVE-2014-8179 | Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the ma... | < 1.8.3 | 7.5 | — | 2019-12-05 | |
| CVE-2014-8178 | Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to st... | < 1.8.3 | 5.5 | — | 2019-12-05 | |
| CVE-2014-9356 | Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and by... | < 1.3.3 | 8.6 | — | 2019-12-03 | |
| CVE-2019-16884 | runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction b... | ≤ 19.03.2 | 7.5 | — | 2019-09-25 | |
| CVE-2019-13139 | In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "dock... | < 18.09.4 | 8.4 | — | 2019-08-23 | |
| CVE-2019-14271 | In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when t... | ≥ 19.03 < 19.03.1 | 9.8 | — | 2019-07-30 | |
| CVE-2019-13509 | In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10),... | ≥ 18.09.0 < 18.09.8 = 17.03.2 = 17.06.2 | 7.5 | — | 2019-07-19 | |
| CVE-2018-15664 | In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink... | = 17.06.0-ce = 17.06.1-ce = 17.06.2-ce | 7.5 | — | 2019-05-23 | |
| CVE-2019-5736 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the h... | < 18.09.2 | 8.6 | — | 2019-02-11 | |
| CVE-2018-15514 | HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stabl... | = 1.10.0.0-0 = 1.10.1.42-1 = 1.10.2.12 | 8.8 | — | 2018-09-01 | |
| CVE-2018-10892 | The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc... | ≥ 1.11 ≤ 18.03.1 | 6.3 | — | 2018-07-07 | |
| CVE-2014-5282 | Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another i... | < 1.3 | 8.1 | — | 2018-02-07 | |
| CVE-2017-14992 | Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17... | ≤ 1.10.3 = 1.12.6-0 = 17.03.0 | 6.5 | — | 2017-11-02 | |
| CVE-2014-0047 | Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage. | ≤ 1.4.1 | 7.8 | — | 2017-10-07 | |
| CVE-2016-9962 | RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This... | ≥ 1.11.0 < 1.12.6 | 6.4 | — | 2017-02-01 | |
| CVE-2016-6595 | The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevent... | = 1.12.0 | 6.5 | — | 2017-01-05 | |
| CVE-2016-8867 | Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicio... | = 1.12.2 | 7.5 | — | 2016-10-29 | |
| CVE-2016-3697 | libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric U... | ≤ 1.11.1 | 7.8 | — | 2016-06-02 | |
| CVE-2015-3627 | Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before perfo... | ≤ 1.6 | 7.2 | — | 2015-05-19 | |
| CVE-2015-3630 | Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latenc... | ≤ 1.6 | 7.2 | — | 2015-05-19 | |
| CVE-2015-3631 | Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t polic... | ≤ 1.6 | 3.6 | — | 2015-05-19 | |
| CVE-2014-9357 | Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or... | = 1.3.2 | 10.0 | — | 2014-12-17 | |
| CVE-2014-9358 | Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traver... | ≤ 1.3.2 | 6.4 | — | 2014-12-17 | |
| CVE-2014-6407 | Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) s... | ≤ 1.3.1 = 1.0.0 = 1.3.0 | 7.5 | — | 2014-12-13 | |
| CVE-2014-6408 | Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and p... | = 1.3.0 = 1.3.1 | 5.0 | — | 2014-12-13 | |
| CVE-2014-5277 | Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fai... | ≤ 1.3.0 | 5.0 | — | 2014-11-18 | |
| CVE-2014-3499 | Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local u... | = 1.0.0 | 7.2 | — | 2014-07-11 |
データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。