{"id":"CVE-2020-14298","published":"2020-07-13T20:53:26Z","modified":"2024-08-04T12:39:36Z","title":"The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an…","vendor":null,"product":null,"tier":"tail","description":{"text":"The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00321,"percentile":0.24973,"provenance":"source"},"cwes":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2020-14298","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/security/vulnerabilities/runcescape","tags":["x_refsource_CONFIRM"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-5736","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHBA-2020:0427","tags":["x_refsource_CONFIRM"]}],"priority":{"score":5.0,"factors":[{"name":"EPSS percentile","points":4.99}]},"affectedVersions":[{"vendor":"n/a","product":"Docker","versions":["Affected version is 1.13.1-108.git4ef4b30.el7 shipped in Red Hat Enterprise Linux 7 Extras"]}],"euvd":{"id":"EUVD-2020-6450","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-opencontainers-runc-cve-2016-9962","parents":[{"from":"CVE-2019-5736","to":"CVE-2020-14298","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304.","from":"CVE.org","in":"CVE-2020-14298"}]}]}}