8.8

CVE-2018-15514: docker Deserialization of Untrusted Data

CVSS: 8.8v3.0HighModified
Published 01-09-2018Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2018-15514 is a high (CVSS 8.8) Deserialization of Untrusted Data vulnerability in docker. EPSS estimates a 2.47% chance of exploitation in the next 30 days, higher than 84.2% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
46/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.0 (NVD)
EPSS score
2.47%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Timeline

  1. 01-09-2018
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over the \\.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users" group (who may not otherwise have administrator access) to escalate to administrator privileges.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

2.47%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

0.00 pp

From 2.47% on 19-09-2026

19-09-202619-10-2026
EPSS score
2.47%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (srcincite.io)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Docker1 product
  • docker1.10.0.0-0 | 1.10.1.42-1 | 1.10.2.12 | 1.10.2.14 | 1.10.4.0 | 1.10.6 | 1.11.0 | 1.11.0:beta10 | 1.11.0:beta7 | 1.11.0:beta8 | 1.11.0:beta9 | 1.11.1:beta11 | 1.11.1:beta11b | 1.11.1:beta12 | 1.11.1:beta13 | 1.11.1:beta14 | 1.11.2:beta15 | 1.12.0 | 1.12.0:beta21 | 1.12.0:beta22 | 1.12.0:rc2-beta16 | 1.12.0:rc2-beta17 | 1.12.0:rc3-beta18 | 1.12.0:rc3-beta18.1 | 1.12.0:rc4-beta19 | 1.12.0:rc4-beta20 | 1.12.1 | 1.12.1:beta24 | 1.12.1:beta25 | 1.12.1:beta26 | 1.12.1:beta29.1 | 1.12.1:rc1-beta23 | 1.12.2:beta29.2 | 1.12.2:rc1-beta27 | 1.12.2:rc3-beta28 | 1.12.3 | 1.12.3:beta29.3 | 1.12.3:beta30 | 1.12.3:rc1-beta29 | 1.12.5 | 1.13.0 | 1.13.0:beta38 | 1.13.0:beta39 | 1.13.0:rc2-beta31 | 1.13.0:rc3-beta32 | 1.13.0:rc3-beta32.1 | 1.13.0:rc3-beta33 | 1.13.0:rc4-beta34 | 1.13.0:rc5-beta35 | 1.13.0:rc6-beta36 | 1.13.0:rc7-beta37 | 1.13.1 | 1.13.1:rc1-beta40 | 1.13.1:rc2-beta41 | 17.0.4:win7 | 17.0.5:win9 | 17.03.0 | 17.03.0:rc1-win1 | 17.03.1:win12 | 17.04.0:win6 | 17.06.0:win13 | 17.06.0:win14 | 17.06.0:win15 | 17.06.0:win16 | 17.06.0:win17 | 17.06.0:win18 | 17.06.1:rc1-win20 | 17.06.1:rc1-win24 | 17.06.2:win27 | 17.07.0:rc1-win21 | 17.07.0:rc2-win22 | 17.07.0:rc3-win23 | 17.07.0:rc4-win25 | 17.07.0:win26 | 17.09.0:rc1-win28 | 17.09.0:rc2-win29 | 17.09.0:rc3-win30 | 17.09.0:win31 | 17.09.0:win32 | 17.09.0:win33 | 17.09.0:win34 | 17.09.1:win42 | 17.10.0:win36 | 17.11.0:rc2-win37 | 17.11.0:rc3-win38 | 17.11.0:rc4-win39 | 17.11.0:win40 | 17.12.0:rc2-win41 | 17.12.0:rc3-win43 | 17.12.0:rc4-win44 | 17.12.0:win45 | 17.12.0:win46 | 17.12.0:win47 | 18.01.0:win48 | 18.02.0:rc1-win50 | 18.02.0:rc2-win51 | 18.02.0:win52 | 18.03.0:rc3-win56 | 18.03.0:win58 | 18.03.0:win59 | 18.03.1:win65 | 18.04.0:rc2-win61 | 18.05.0:rc1-win63 | 18.05.0:win66

1 vendor · 1 product

References

4 links