Security
Security
A flaw in Docker allowed possible information leakage.
| Package | app-emulation/docker on all architectures |
|---|---|
| Affected versions | < 19.03.12 |
| Unaffected versions | >= 19.03.12 |
Docker is the world’s leading software containerization platform.
It was found that Docker created network bridges which by default accept IPv6 router advertisements.
An attacker who gained access to a container with CAP_NET_RAW capability may be able to to spoof router advertisements, resulting in information disclosure or denial of service.
There is no known workaround at this time.
All Docker users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/docker-19.03.12"
Release date
August 26, 2020
Latest revision
August 26, 2020: 1
Severity
normal
Exploitable
local
Bugzilla entries