CVE-2024-9348: Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view
Published Oct 16, 2024
·Updated
Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.
Affected Software
1 affected component
Docker Desktop<4.34.3
Remediation
Information
Update to Docker Desktop 4.34.3 or later
Event History
Oct 16, 2024
CVE Published
via MITRE·02:50 PM
Data Sourced
via MITRE·02:50 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-9348?
CVE-2024-9348 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2024-9348?
To fix CVE-2024-9348, upgrade Docker Desktop to version 4.34.3 or later.
3
What is the impact of CVE-2024-9348?
The impact of CVE-2024-9348 includes the ability for an attacker to execute arbitrary code on affected systems.
4
Which versions of Docker Desktop are affected by CVE-2024-9348?
Docker Desktop versions before 4.34.3 are affected by CVE-2024-9348.
5
Is there a workaround for CVE-2024-9348 until I can upgrade?
Currently, there is no documented workaround for CVE-2024-9348; upgrading to a fixed version is the recommended action.