CVE-2023-5165: Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell
Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time window after launching Docker Desktop. The affected functionality is available for Docker Business customers only and assumes an environment where users are not granted local root or Administrator privileges.
This issue has been fixed in Docker Desktop 4.23.0.
Affected Docker Desktop versions: from 4.13.0 before 4.23.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-5165?
CVE-2023-5165 is a vulnerability in Docker Desktop before 4.23.0 that allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions.
How can an unprivileged user bypass Enhanced Container Isolation (ECI) in Docker Desktop before 4.23.0?
An unprivileged user can bypass Enhanced Container Isolation (ECI) in Docker Desktop before 4.23.0 by accessing the debug shell, which remains accessible for a short time window after launching Docker Desktop.
Who is affected by CVE-2023-5165?
CVE-2023-5165 affects Docker Desktop users before version 4.23.0.
What is the severity of CVE-2023-5165?
CVE-2023-5165 has a severity rating of 8.8 (high).
How can I fix CVE-2023-5165?
To fix CVE-2023-5165, users should update Docker Desktop to version 4.23.0 or later.