CVE-2018-15514
Summary
| CVE | CVE-2018-15514 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-09-01 01:29:00 UTC |
| Updated | 2018-11-09 14:23:00 UTC |
| Description | HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users" group (who may not otherwise have administrator access) to escalate to administrator privileges. |
Risk And Classification
Problem Types: CWE-502
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Docker | Docker | 1.10.0.0-0 | All | All | All |
| Application | Docker | Docker | 1.10.1.42-1 | All | All | All |
| Application | Docker | Docker | 1.10.2.12 | All | All | All |
| Application | Docker | Docker | 1.10.2.14 | All | All | All |
| Application | Docker | Docker | 1.10.4.0 | All | All | All |
| Application | Docker | Docker | 1.10.6 | All | All | All |
| Application | Docker | Docker | 1.11.0 | All | All | All |
| Application | Docker | Docker | 1.11.0 | beta10 | All | All |
| Application | Docker | Docker | 1.11.0 | beta7 | All | All |
| Application | Docker | Docker | 1.11.0 | beta8 | All | All |
| Application | Docker | Docker | 1.11.0 | beta9 | All | All |
| Application | Docker | Docker | 1.11.1 | beta11 | All | All |
| Application | Docker | Docker | 1.11.1 | beta11b | All | All |
| Application | Docker | Docker | 1.11.1 | beta12 | All | All |
| Application | Docker | Docker | 1.11.1 | beta13 | All | All |
| Application | Docker | Docker | 1.11.1 | beta14 | All | All |
| Application | Docker | Docker | 1.11.2 | beta15 | All | All |
| Application | Docker | Docker | 1.12.0 | All | All | All |
| Application | Docker | Docker | 1.12.0 | beta21 | All | All |
| Application | Docker | Docker | 1.12.0 | beta22 | All | All |
| Application | Docker | Docker | 1.12.0 | rc2-beta16 | All | All |
| Application | Docker | Docker | 1.12.0 | rc2-beta17 | All | All |
| Application | Docker | Docker | 1.12.0 | rc3-beta18 | All | All |
| Application | Docker | Docker | 1.12.0 | rc3-beta18.1 | All | All |
| Application | Docker | Docker | 1.12.0 | rc4-beta19 | All | All |
| Application | Docker | Docker | 1.12.0 | rc4-beta20 | All | All |
| Application | Docker | Docker | 1.12.1 | All | All | All |
| Application | Docker | Docker | 1.12.1 | beta24 | All | All |
| Application | Docker | Docker | 1.12.1 | beta25 | All | All |
| Application | Docker | Docker | 1.12.1 | beta26 | All | All |
| Application | Docker | Docker | 1.12.1 | beta29.1 | All | All |
| Application | Docker | Docker | 1.12.1 | rc1-beta23 | All | All |
| Application | Docker | Docker | 1.12.2 | beta29.2 | All | All |
| Application | Docker | Docker | 1.12.2 | rc1-beta27 | All | All |
| Application | Docker | Docker | 1.12.2 | rc3-beta28 | All | All |
| Application | Docker | Docker | 1.12.3 | All | All | All |
| Application | Docker | Docker | 1.12.3 | beta29.3 | All | All |
| Application | Docker | Docker | 1.12.3 | beta30 | All | All |
| Application | Docker | Docker | 1.12.3 | rc1-beta29 | All | All |
| Application | Docker | Docker | 1.12.5 | All | All | All |
| Application | Docker | Docker | 1.13.0 | All | All | All |
| Application | Docker | Docker | 1.13.0 | beta38 | All | All |
| Application | Docker | Docker | 1.13.0 | beta39 | All | All |
| Application | Docker | Docker | 1.13.0 | rc2-beta31 | All | All |
| Application | Docker | Docker | 1.13.0 | rc3-beta32 | All | All |
| Application | Docker | Docker | 1.13.0 | rc3-beta32.1 | All | All |
| Application | Docker | Docker | 1.13.0 | rc3-beta33 | All | All |
| Application | Docker | Docker | 1.13.0 | rc4-beta34 | All | All |
| Application | Docker | Docker | 1.13.0 | rc5-beta35 | All | All |
| Application | Docker | Docker | 1.13.0 | rc6-beta36 | All | All |
| Application | Docker | Docker | 1.13.0 | rc7-beta37 | All | All |
| Application | Docker | Docker | 1.13.1 | All | All | All |
| Application | Docker | Docker | 1.13.1 | rc1-beta40 | All | All |
| Application | Docker | Docker | 1.13.1 | rc2-beta41 | All | All |
| Application | Docker | Docker | 17.0.4 | win7 | All | All |
| Application | Docker | Docker | 17.0.5 | win9 | All | All |
| Application | Docker | Docker | 17.03.0 | All | All | All |
| Application | Docker | Docker | 17.03.0 | rc1-win1 | All | All |
| Application | Docker | Docker | 17.03.1 | win12 | All | All |
| Application | Docker | Docker | 17.04.0 | win6 | All | All |
| Application | Docker | Docker | 17.06.0 | win13 | All | All |
| Application | Docker | Docker | 17.06.0 | win14 | All | All |
| Application | Docker | Docker | 17.06.0 | win15 | All | All |
| Application | Docker | Docker | 17.06.0 | win16 | All | All |
| Application | Docker | Docker | 17.06.0 | win17 | All | All |
| Application | Docker | Docker | 17.06.0 | win18 | All | All |
| Application | Docker | Docker | 17.06.1 | rc1-win20 | All | All |
| Application | Docker | Docker | 17.06.1 | rc1-win24 | All | All |
| Application | Docker | Docker | 17.06.2 | win27 | All | All |
| Application | Docker | Docker | 17.07.0 | rc1-win21 | All | All |
| Application | Docker | Docker | 17.07.0 | rc2-win22 | All | All |
| Application | Docker | Docker | 17.07.0 | rc3-win23 | All | All |
| Application | Docker | Docker | 17.07.0 | rc4-win25 | All | All |
| Application | Docker | Docker | 17.07.0 | win26 | All | All |
| Application | Docker | Docker | 17.09.0 | rc1-win28 | All | All |
| Application | Docker | Docker | 17.09.0 | rc2-win29 | All | All |
| Application | Docker | Docker | 17.09.0 | rc3-win30 | All | All |
| Application | Docker | Docker | 17.09.0 | win31 | All | All |
| Application | Docker | Docker | 17.09.0 | win32 | All | All |
| Application | Docker | Docker | 17.09.0 | win33 | All | All |
| Application | Docker | Docker | 17.09.0 | win34 | All | All |
| Application | Docker | Docker | 17.09.1 | win42 | All | All |
| Application | Docker | Docker | 17.10.0 | win36 | All | All |
| Application | Docker | Docker | 17.11.0 | rc2-win37 | All | All |
| Application | Docker | Docker | 17.11.0 | rc3-win38 | All | All |
| Application | Docker | Docker | 17.11.0 | rc4-win39 | All | All |
| Application | Docker | Docker | 17.11.0 | win40 | All | All |
| Application | Docker | Docker | 17.12.0 | rc2-win41 | All | All |
| Application | Docker | Docker | 17.12.0 | rc3-win43 | All | All |
| Application | Docker | Docker | 17.12.0 | rc4-win44 | All | All |
| Application | Docker | Docker | 17.12.0 | win45 | All | All |
| Application | Docker | Docker | 17.12.0 | win46 | All | All |
| Application | Docker | Docker | 17.12.0 | win47 | All | All |
| Application | Docker | Docker | 18.01.0 | win48 | All | All |
| Application | Docker | Docker | 18.02.0 | rc1-win50 | All | All |
| Application | Docker | Docker | 18.02.0 | rc2-win51 | All | All |
| Application | Docker | Docker | 18.02.0 | win52 | All | All |
| Application | Docker | Docker | 18.03.0 | rc3-win56 | All | All |
| Application | Docker | Docker | 18.03.0 | win58 | All | All |
| Application | Docker | Docker | 18.03.0 | win59 | All | All |
| Application | Docker | Docker | 18.03.1 | win65 | All | All |
| Application | Docker | Docker | 18.04.0 | rc2-win61 | All | All |
| Application | Docker | Docker | 18.05.0 | rc1-win63 | All | All |
| Application | Docker | Docker | 18.05.0 | win66 | All | All |
| Application | Docker | Docker | 1.10.0.0-0 | All | All | All |
| Application | Docker | Docker | 1.10.1.42-1 | All | All | All |
| Application | Docker | Docker | 1.10.2.12 | All | All | All |
| Application | Docker | Docker | 1.10.2.14 | All | All | All |
| Application | Docker | Docker | 1.10.4.0 | All | All | All |
| Application | Docker | Docker | 1.10.6 | All | All | All |
| Application | Docker | Docker | 1.11.0 | All | All | All |
| Application | Docker | Docker | 1.11.0 | beta10 | All | All |
| Application | Docker | Docker | 1.11.0 | beta7 | All | All |
| Application | Docker | Docker | 1.11.0 | beta8 | All | All |
| Application | Docker | Docker | 1.11.0 | beta9 | All | All |
| Application | Docker | Docker | 1.11.1 | beta11 | All | All |
| Application | Docker | Docker | 1.11.1 | beta11b | All | All |
| Application | Docker | Docker | 1.11.1 | beta12 | All | All |
| Application | Docker | Docker | 1.11.1 | beta13 | All | All |
| Application | Docker | Docker | 1.11.1 | beta14 | All | All |
| Application | Docker | Docker | 1.11.2 | beta15 | All | All |
| Application | Docker | Docker | 1.12.0 | All | All | All |
| Application | Docker | Docker | 1.12.0 | beta21 | All | All |
| Application | Docker | Docker | 1.12.0 | beta22 | All | All |
| Application | Docker | Docker | 1.12.0 | rc2-beta16 | All | All |
| Application | Docker | Docker | 1.12.0 | rc2-beta17 | All | All |
| Application | Docker | Docker | 1.12.0 | rc3-beta18 | All | All |
| Application | Docker | Docker | 1.12.0 | rc3-beta18.1 | All | All |
| Application | Docker | Docker | 1.12.0 | rc4-beta19 | All | All |
| Application | Docker | Docker | 1.12.0 | rc4-beta20 | All | All |
| Application | Docker | Docker | 1.12.1 | All | All | All |
| Application | Docker | Docker | 1.12.1 | beta24 | All | All |
| Application | Docker | Docker | 1.12.1 | beta25 | All | All |
| Application | Docker | Docker | 1.12.1 | beta26 | All | All |
| Application | Docker | Docker | 1.12.1 | beta29.1 | All | All |
| Application | Docker | Docker | 1.12.1 | rc1-beta23 | All | All |
| Application | Docker | Docker | 1.12.2 | beta29.2 | All | All |
| Application | Docker | Docker | 1.12.2 | rc1-beta27 | All | All |
| Application | Docker | Docker | 1.12.2 | rc3-beta28 | All | All |
| Application | Docker | Docker | 1.12.3 | All | All | All |
| Application | Docker | Docker | 1.12.3 | beta29.3 | All | All |
| Application | Docker | Docker | 1.12.3 | beta30 | All | All |
| Application | Docker | Docker | 1.12.3 | rc1-beta29 | All | All |
| Application | Docker | Docker | 1.12.5 | All | All | All |
| Application | Docker | Docker | 1.13.0 | All | All | All |
| Application | Docker | Docker | 1.13.0 | beta38 | All | All |
| Application | Docker | Docker | 1.13.0 | beta39 | All | All |
| Application | Docker | Docker | 1.13.0 | rc2-beta31 | All | All |
| Application | Docker | Docker | 1.13.0 | rc3-beta32 | All | All |
| Application | Docker | Docker | 1.13.0 | rc3-beta32.1 | All | All |
| Application | Docker | Docker | 1.13.0 | rc3-beta33 | All | All |
| Application | Docker | Docker | 1.13.0 | rc4-beta34 | All | All |
| Application | Docker | Docker | 1.13.0 | rc5-beta35 | All | All |
| Application | Docker | Docker | 1.13.0 | rc6-beta36 | All | All |
| Application | Docker | Docker | 1.13.0 | rc7-beta37 | All | All |
| Application | Docker | Docker | 1.13.1 | All | All | All |
| Application | Docker | Docker | 1.13.1 | rc1-beta40 | All | All |
| Application | Docker | Docker | 1.13.1 | rc2-beta41 | All | All |
| Application | Docker | Docker | 17.0.4 | win7 | All | All |
| Application | Docker | Docker | 17.0.5 | win9 | All | All |
| Application | Docker | Docker | 17.03.0 | All | All | All |
| Application | Docker | Docker | 17.03.0 | rc1-win1 | All | All |
| Application | Docker | Docker | 17.03.1 | win12 | All | All |
| Application | Docker | Docker | 17.04.0 | win6 | All | All |
| Application | Docker | Docker | 17.06.0 | win13 | All | All |
| Application | Docker | Docker | 17.06.0 | win14 | All | All |
| Application | Docker | Docker | 17.06.0 | win15 | All | All |
| Application | Docker | Docker | 17.06.0 | win16 | All | All |
| Application | Docker | Docker | 17.06.0 | win17 | All | All |
| Application | Docker | Docker | 17.06.0 | win18 | All | All |
| Application | Docker | Docker | 17.06.1 | rc1-win20 | All | All |
| Application | Docker | Docker | 17.06.1 | rc1-win24 | All | All |
| Application | Docker | Docker | 17.06.2 | win27 | All | All |
| Application | Docker | Docker | 17.07.0 | rc1-win21 | All | All |
| Application | Docker | Docker | 17.07.0 | rc2-win22 | All | All |
| Application | Docker | Docker | 17.07.0 | rc3-win23 | All | All |
| Application | Docker | Docker | 17.07.0 | rc4-win25 | All | All |
| Application | Docker | Docker | 17.07.0 | win26 | All | All |
| Application | Docker | Docker | 17.09.0 | rc1-win28 | All | All |
| Application | Docker | Docker | 17.09.0 | rc2-win29 | All | All |
| Application | Docker | Docker | 17.09.0 | rc3-win30 | All | All |
| Application | Docker | Docker | 17.09.0 | win31 | All | All |
| Application | Docker | Docker | 17.09.0 | win32 | All | All |
| Application | Docker | Docker | 17.09.0 | win33 | All | All |
| Application | Docker | Docker | 17.09.0 | win34 | All | All |
| Application | Docker | Docker | 17.09.1 | win42 | All | All |
| Application | Docker | Docker | 17.10.0 | win36 | All | All |
| Application | Docker | Docker | 17.11.0 | rc2-win37 | All | All |
| Application | Docker | Docker | 17.11.0 | rc3-win38 | All | All |
| Application | Docker | Docker | 17.11.0 | rc4-win39 | All | All |
| Application | Docker | Docker | 17.11.0 | win40 | All | All |
| Application | Docker | Docker | 17.12.0 | rc2-win41 | All | All |
| Application | Docker | Docker | 17.12.0 | rc3-win43 | All | All |
| Application | Docker | Docker | 17.12.0 | rc4-win44 | All | All |
| Application | Docker | Docker | 17.12.0 | win45 | All | All |
| Application | Docker | Docker | 17.12.0 | win46 | All | All |
| Application | Docker | Docker | 17.12.0 | win47 | All | All |
| Application | Docker | Docker | 18.01.0 | win48 | All | All |
| Application | Docker | Docker | 18.02.0 | rc1-win50 | All | All |
| Application | Docker | Docker | 18.02.0 | rc2-win51 | All | All |
| Application | Docker | Docker | 18.02.0 | win52 | All | All |
| Application | Docker | Docker | 18.03.0 | rc3-win56 | All | All |
| Application | Docker | Docker | 18.03.0 | win58 | All | All |
| Application | Docker | Docker | 18.03.0 | win59 | All | All |
| Application | Docker | Docker | 18.03.1 | win65 | All | All |
| Application | Docker | Docker | 18.04.0 | rc2-win61 | All | All |
| Application | Docker | Docker | 18.05.0 | rc1-win63 | All | All |
| Application | Docker | Docker | 18.05.0 | win66 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Docker Desktop for Windows Edge Release notes | Docker Documentation | MISC | docs.docker.com | Vendor Advisory |
| You can't contain me! :: Analyzing and Exploiting an Elevation of Privilege Vulnerability in Docker for Windows | MISC | srcincite.io | Exploit, Third Party Advisory |
| Malformed Request | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Redirecting… | MISC | docs.docker.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.