CVE-2023-0625: Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog
Published Sep 25, 2023
·Updated
Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog.
This issue affects Docker Desktop: before 4.12.0.
Affected Software
1 affected component
Docker Docker Desktop<4.12.0
Remediation
Information
Update to 4.12.0
Event History
Sep 25, 2023
CVE Published
via MITRE·03:31 PM
Data Sourced
via MITRE·03:31 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-0625?
CVE-2023-0625 is a vulnerability in Docker Desktop before version 4.12.0 that allows remote code execution through a crafted extension description or changelog.
2
How does CVE-2023-0625 affect Docker Desktop?
CVE-2023-0625 affects Docker Desktop versions before 4.12.0.
3
What is the severity of CVE-2023-0625?
CVE-2023-0625 has a severity rating of 9.8 (critical).
4
How can I fix CVE-2023-0625?
To fix CVE-2023-0625, you should update Docker Desktop to version 4.12.0 or later.
5
Where can I find more information about CVE-2023-0625?
More information about CVE-2023-0625 can be found in the Docker Desktop release notes: https://docs.docker.com/desktop/release-notes/#4120