CVE-2020-14298: High severity Docker Docker vulnerability
The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-14298?
CVE-2020-14298 is a vulnerability in the version of docker released for Red Hat Enterprise Linux 7 Extras.
How does CVE-2020-14298 affect Docker?
CVE-2020-14298 can allow a malicious or compromised container to compromise the host system.
What is the severity of CVE-2020-14298?
CVE-2020-14298 has a severity rating of 8.8 (high).
How can I fix CVE-2020-14298 in Docker?
To fix CVE-2020-14298 in Docker, you should update to the corrected version of runc.
Where can I find more information about CVE-2020-14298?
You can find more information about CVE-2020-14298 on the Red Hat Security Advisory page.