ZDI-24-966: Docker Desktop Daemon CLI External Control of File Path Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2024-5652.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-966?
The ZDI-24-966 vulnerability is classified as a denial-of-service (DoS) vulnerability.
How do I fix ZDI-24-966?
To mitigate ZDI-24-966, update Docker Desktop to the latest version where this vulnerability is patched.
Who is affected by ZDI-24-966?
ZDI-24-966 affects installations of Docker Desktop running on systems where low-privileged code can be executed.
What types of attacks are possible with ZDI-24-966?
ZDI-24-966 allows local attackers to create a denial-of-service condition on affected systems.
What is the impact of exploiting ZDI-24-966?
Exploiting ZDI-24-966 can lead to service interruptions for Docker Desktop users.