CVE-2020-13401
Fixed in a distro release EPSS 3%
An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.
Products: docker engine, fedoraproject fedora, debian_linux, broadcom sannav
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/docker/docker-ce | 19.03.11 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | auditbeat-7 | 7.17.28-r3 |
| Chainguard | auditbeat-7-oci-entrypoint | 7.17.28-r3 |
| Chainguard | auditbeat-fips-7 | 7.17.28-r5 |
| Chainguard | beats-7 | 7.17.28-r3 |
| Chainguard | beats-fips-7 | 7.17.28-r5 |
| Chainguard | filebeat-7 | 7.17.28-r3 |
| Chainguard | filebeat-7-oci-entrypoint | 7.17.28-r3 |
| Chainguard | filebeat-fips-7 | 7.17.28-r5 |
| Chainguard | gitness | 0 |
| Chainguard | heartbeat-7 | 7.17.28-r3 |
| Chainguard | heartbeat-7-oci-entrypoint | 7.17.28-r3 |
| Chainguard | heartbeat-fips-7 | 7.17.28-r5 |
| Chainguard | heartbeat-fips-7-oci-entrypoint | 7.17.28-r5 |
| Chainguard | metricbeat-7 | 7.17.28-r3 |
| Chainguard | metricbeat-7-oci-entrypoint | 7.17.28-r3 |
| Chainguard | metricbeat-fips-7 | 7.17.28-r5 |
| Debian 10 | docker.io | 18.09.1+dfsg1-7.1+deb10u2 |
| Debian 12 | docker.io | 19.03.11+dfsg1-1 |
| Debian 13 | docker.io | 19.03.11+dfsg1-1 |
| Debian 14 | docker.io | 19.03.11+dfsg1-1 |
| SUSE Enterprise Storage 7.1 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 12 | containerd | 1.2.13-16.29.1 |
| SUSE Linux Enterprise Module for Containers 12 | docker | 19.03.11_ce-98.54.1 |
| SUSE Linux Enterprise Module for Containers 12 | docker-runc | 1.0.0rc10+gitr3981_dc9208a3303f-1.46.1 |
| SUSE Linux Enterprise Module for Containers 12 | golang-github-docker-libnetwork | 0.7.0.1+gitr2902_153d0769a118-31.1 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | containerd | 1.2.13-5.22.2 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | docker | 19.03.11_ce-6.34.2 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | docker-runc | 1.0.0rc10+gitr3981_dc9208a3303f-6.38.2 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | golang-github-docker-libnetwork | 0.7.0.1+gitr2902_153d0769a118-4.21.2 |
| SUSE Linux Enterprise Module for Containers 15 SP2 | containerd | 1.2.13-5.22.2 |
| SUSE Linux Enterprise Module for Containers 15 SP2 | docker | 19.03.11_ce-6.34.2 |
| SUSE Linux Enterprise Module for Containers 15 SP2 | docker-runc | 1.0.0rc10+gitr3981_dc9208a3303f-6.38.2 |
| SUSE Linux Enterprise Module for Containers 15 SP2 | golang-github-docker-libnetwork | 0.7.0.1+gitr2902_153d0769a118-4.21.2 |
| SUSE Linux Enterprise Module for Containers 15 SP6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 15 SP7 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| Ubuntu 18.04 LTS | docker.io | 20.10.7-0ubuntu1~18.04.1 |
| Ubuntu 20.04 LTS | docker.io | 20.10.7-0ubuntu1~20.04.1 |
| Ubuntu Pro 16.04 LTS | docker.io | no fix |
| Wolfi | gitness | 0 |
| openSUSE Leap 15.1 | containerd | 1.2.13-lp151.2.12.1 |
| openSUSE Leap 15.1 | docker | 19.03.11_ce-lp151.2.18.1 |
| openSUSE Leap 15.1 | docker-runc | 1.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1 |
| openSUSE Leap 15.1 | golang-github-docker-libnetwork | 0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| openSUSE Tumbleweed | docker | 20.10.6_ce-2.1 |
| openSUSE Tumbleweed | docker-stable | 24.0.9_ce-15.1 |