PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2020-13401

CVE-2020-13401

docker: IPv6 router advertisements allow for MitM attacks

Loading…

Severity

Moderate

Red Hat Product Security

6

CVSS 3.1

Review impact separately from score.

Published · June 1, 2020

Updated · November 22, 2025

Description

A flaw was found in Docker when it creates network bridges that accept IPv6 router advertisements by default. This flaw allows an attacker who can execute code in a container to possibly spoof rogue IPv6 router advertisements to perform a man-in-the-middle (MitM) attack against the host network or another container.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Prevent untrusted, non-privileged containers from running with CAP_NET_RAW.

CVSS / CWE

CVSS 3.1 · 6
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE-300 · Channel Accessible by Non-Endpoint