{"id":"CVE-2020-14298","state":"PUBLISHED","title":"The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which w","description":"The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.","publishedAt":"2020-07-13T20:53:26.000Z","updatedAt":"2024-08-04T12:39:36.209Z","severity":null,"assigner":"redhat","products":["n/a Docker"],"affected":[{"vendor":"n/a","product":"Docker","versions":[{"version":"Affected version is 1.13.1-108.git4ef4b30.el7 shipped in Red Hat Enterprise Linux 7 Extras","status":"affected"}]}],"references":["https://access.redhat.com/security/cve/CVE-2020-14298","https://access.redhat.com/security/vulnerabilities/runcescape","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-5736","https://access.redhat.com/errata/RHBA-2020:0427"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:33.607Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/14xxx/CVE-2020-14298.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-14298","state":"PUBLISHED","datePublished":"2020-07-13T20:53:26.000Z","dateUpdated":"2024-08-04T12:39:36.209Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2020-06-17T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected."}],"affected":[{"vendor":"n/a","product":"Docker","versions":[{"version":"Affected version is 1.13.1-108.git4ef4b30.el7 shipped in Red Hat Enterprise Linux 7 Extras","status":"affected"}]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2020-14298","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/security/vulnerabilities/runcescape","tags":["x_refsource_CONFIRM"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-5736","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHBA-2020:0427","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Regression","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2020-07-13T20:53:26.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/security/cve/CVE-2020-14298","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://access.redhat.com/security/vulnerabilities/runcescape","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-5736","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://access.redhat.com/errata/RHBA-2020:0427","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T12:39:36.209Z"}}]}}}