CVE catalog

CVE-2020-13401

docker.io: CVE-2020-13401

[CVE catalog]

Severity
Medium · CVSS 6CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
2.86% · Oct 25, 2026

An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandocker.iosid28.5.2+dfsg4-5fixed
Debiandocker.ioforky28.5.2+dfsg4-5fixed
Debiandocker.iotrixie26.1.5+dfsg1-9+deb13u1fixed
Debiandocker.iotrixie-security26.1.5+dfsg1-9+deb13u1fixed
Debiandocker.iobookworm20.10.24+dfsg1-1+deb12u1fixed
Susecontainerdlinux enterprise module for containers 15 sp11.2.13-5.22.2fixed
Susedockerlinux enterprise module for containers 15 sp119.03.11_ce-6.34.2fixed
Susedocker-runclinux enterprise module for containers 15 sp11.0.0rc10+gitr3981_dc9208a3303f-6.38.2fixed
Susegolang-github-docker-libnetworklinux enterprise module for containers 15 sp10.7.0.1+gitr2902_153d0769a118-4.21.2fixed
Susecontainerdlinux enterprise module for containers 121.2.13-16.29.1fixed
Susedockerlinux enterprise module for containers 1219.03.11_ce-98.54.1fixed
Susedocker-runclinux enterprise module for containers 121.0.0rc10+gitr3981_dc9208a3303f-1.46.1fixed
Susegolang-github-docker-libnetworklinux enterprise module for containers 120.7.0.1+gitr2902_153d0769a118-31.1fixed
Susecontainerdlinux enterprise module for containers 15 sp21.2.13-5.22.2fixed
Susedockerlinux enterprise module for containers 15 sp219.03.11_ce-6.34.2fixed
Susedocker-runclinux enterprise module for containers 15 sp21.0.0rc10+gitr3981_dc9208a3303f-6.38.2fixed
Susegolang-github-docker-libnetworklinux enterprise module for containers 15 sp20.7.0.1+gitr2902_153d0769a118-4.21.2fixed
Opensusecontainerdleap 15.11.2.13-lp151.2.12.1fixed
Opensusedockerleap 15.119.03.11_ce-lp151.2.18.1fixed
Opensusedocker-runcleap 15.11.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1fixed
Opensusegolang-github-docker-libnetworkleap 15.10.7.0.1+gitr2902_153d0769a118-lp151.2.12.1fixed
Ubuntudocker.iopro1.6.2~dfsg1-1ubuntu4vulnerable
Ubuntudocker.iopro1.10.2-0ubuntu3vulnerable
Ubuntudocker.iopro1.10.2-0ubuntu4vulnerable
Ubuntudocker.iopro1.10.3-0ubuntu1vulnerable
Ubuntudocker.iopro1.10.3-0ubuntu4vulnerable
Ubuntudocker.iopro1.10.3-0ubuntu5vulnerable
Ubuntudocker.iopro1.10.3-0ubuntu6vulnerable
Ubuntudocker.iopro1.11.2-0ubuntu5~16.04vulnerable
Ubuntudocker.iopro1.12.1-0ubuntu13~16.04.1vulnerable
Ubuntudocker.iopro1.12.3-0ubuntu4~16.04.2vulnerable
Ubuntudocker.iopro1.12.6-0ubuntu1~16.04.1vulnerable
Ubuntudocker.iopro1.13.1-0ubuntu1~16.04.2vulnerable
Ubuntudocker.iopro17.03.2-0ubuntu2~16.04.1vulnerable
Ubuntudocker.iopro18.06.1-0ubuntu1~16.04.2vulnerable
Ubuntudocker.iopro18.06.1-0ubuntu1.2~16.04.1vulnerable
Ubuntudocker.iopro18.09.2-0ubuntu1~16.04.1vulnerable
Ubuntudocker.iopro18.09.5-0ubuntu1~16.04.2vulnerable
Ubuntudocker.iopro18.09.7-0ubuntu1~16.04.1vulnerable
Ubuntudocker.iopro18.09.7-0ubuntu1~16.04.4vulnerable
Ubuntudocker.iopro18.09.7-0ubuntu1~16.04.5vulnerable
Ubuntudocker.iopro18.09.7-0ubuntu1~16.04.6vulnerable
Ubuntudocker.iopro18.09.7-0ubuntu1~16.04.7vulnerable
Ubuntudocker.iopro18.09.7-0ubuntu1~16.04.9+esm1vulnerable
Ubuntudocker.iopro18.09.7-0ubuntu1~16.04.9+esm2vulnerable
Ubuntudocker.io18.041.13.1-0ubuntu6vulnerable
Ubuntudocker.io18.0417.03.2-0ubuntu1vulnerable
Ubuntudocker.io18.0417.03.2-0ubuntu3vulnerable
Ubuntudocker.io18.0417.03.2-0ubuntu5vulnerable
Ubuntudocker.io18.0417.12.1-0ubuntu1vulnerable
Ubuntudocker.io18.0418.06.1-0ubuntu1~18.04.1vulnerable
Ubuntudocker.io18.0418.06.1-0ubuntu1.2~18.04.1vulnerable
Ubuntudocker.io18.0418.09.2-0ubuntu1~18.04.1vulnerable
Ubuntudocker.io18.0418.09.5-0ubuntu1~18.04.2vulnerable
Ubuntudocker.io18.0418.09.7-0ubuntu1~18.04.1vulnerable
Ubuntudocker.io18.0418.09.7-0ubuntu1~18.04.3vulnerable
Ubuntudocker.io18.0418.09.7-0ubuntu1~18.04.4vulnerable
Ubuntudocker.io18.0419.03.6-0ubuntu1~18.04.1vulnerable
Ubuntudocker.io18.0419.03.6-0ubuntu1~18.04.2vulnerable
Ubuntudocker.io18.0419.03.6-0ubuntu1~18.04.3vulnerable
Ubuntudocker.io18.0420.10.2-0ubuntu1~18.04.2vulnerable
Ubuntudocker.io18.0420.10.2-0ubuntu1~18.04.3vulnerable
Ubuntudocker.io18.0420.10.7-0ubuntu1~18.04.1fixed
Ubuntudocker.io20.0419.03.2-0ubuntu1vulnerable
Ubuntudocker.io20.0419.03.6-0ubuntu1vulnerable
Ubuntudocker.io20.0419.03.8-0ubuntu1vulnerable
Ubuntudocker.io20.0419.03.8-0ubuntu1.20.04vulnerable
Ubuntudocker.io20.0419.03.8-0ubuntu1.20.04.1vulnerable
Ubuntudocker.io20.0419.03.8-0ubuntu1.20.04.2vulnerable
Ubuntudocker.io20.0420.10.2-0ubuntu1~20.04.2vulnerable
Ubuntudocker.io20.0420.10.2-0ubuntu1~20.04.3vulnerable
Ubuntudocker.io20.0420.10.7-0ubuntu1~20.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandocker.iosourcesid19.03.11+dfsg1-1not yet assignedNot reported[962141]
Debiandocker.iosourceforky19.03.11+dfsg1-1not yet assignedNot reported[962141]
Debiandocker.iosourcetrixie19.03.11+dfsg1-1not yet assignedNot reported[962141]
Debiandocker.iosourcebookworm19.03.11+dfsg1-1not yet assignedNot reported[962141]
Susecontainerdrpmlinux enterprise module for containers 15 sp11.2.13-5.22.2Not reportedSUSE-SU-2020:1657-1Not reported
Susedockerrpmlinux enterprise module for containers 15 sp119.03.11_ce-6.34.2Not reportedSUSE-SU-2020:1657-1Not reported
Susedocker-runcrpmlinux enterprise module for containers 15 sp11.0.0rc10+gitr3981_dc9208a3303f-6.38.2Not reportedSUSE-SU-2020:1657-1Not reported
Susegolang-github-docker-libnetworkrpmlinux enterprise module for containers 15 sp10.7.0.1+gitr2902_153d0769a118-4.21.2Not reportedSUSE-SU-2020:1657-1Not reported
Susecontainerdrpmlinux enterprise module for containers 121.2.13-16.29.1Not reportedSUSE-SU-2020:1664-1Not reported
Susedockerrpmlinux enterprise module for containers 1219.03.11_ce-98.54.1Not reportedSUSE-SU-2020:1664-1Not reported
Susedocker-runcrpmlinux enterprise module for containers 121.0.0rc10+gitr3981_dc9208a3303f-1.46.1Not reportedSUSE-SU-2020:1664-1Not reported
Susegolang-github-docker-libnetworkrpmlinux enterprise module for containers 120.7.0.1+gitr2902_153d0769a118-31.1Not reportedSUSE-SU-2020:1664-1Not reported
Susecontainerdrpmlinux enterprise module for containers 15 sp21.2.13-5.22.2Not reportedSUSE-SU-2020:1657-2Not reported
Susedockerrpmlinux enterprise module for containers 15 sp219.03.11_ce-6.34.2Not reportedSUSE-SU-2020:1657-2Not reported
Susedocker-runcrpmlinux enterprise module for containers 15 sp21.0.0rc10+gitr3981_dc9208a3303f-6.38.2Not reportedSUSE-SU-2020:1657-2Not reported
Susegolang-github-docker-libnetworkrpmlinux enterprise module for containers 15 sp20.7.0.1+gitr2902_153d0769a118-4.21.2Not reportedSUSE-SU-2020:1657-2Not reported
Opensusecontainerdrpmleap 15.11.2.13-lp151.2.12.1Not reportedOPENSUSE-SU-2020:0846-1Not reported
Opensusedockerrpmleap 15.119.03.11_ce-lp151.2.18.1Not reportedOPENSUSE-SU-2020:0846-1Not reported
Opensusedocker-runcrpmleap 15.11.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1Not reportedOPENSUSE-SU-2020:0846-1Not reported
Opensusegolang-github-docker-libnetworkrpmleap 15.10.7.0.1+gitr2902_153d0769a118-lp151.2.12.1Not reportedOPENSUSE-SU-2020:0846-1Not reported
Ubuntudocker.iodeb18.0420.10.7-0ubuntu1~18.04.1Not reportedUBUNTU-CVE-2020-13401Not reported
Ubuntudocker.iodeb20.0420.10.7-0ubuntu1~20.04.1Not reportedUBUNTU-CVE-2020-13401Not reported

[Debian bug #962141]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [docker-doc]Unknown

    Source package: [docker.io]

    Details (2)

    • 20.10.24+dfsg1-1+deb12u1 · all · bookworm

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12

    • 20.10.24+dfsg1-1+deb12u1 · all · bookworm

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12

  • [docker.io]Unknown

    Source package: [docker.io]

    Details (2)

    • 20.10.24+dfsg1-1+deb12u1+b6 · amd64 · bookworm

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12

    • 20.10.24+dfsg1-1+deb12u1+b6 · arm64 · bookworm

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12

  • [golang-github-docker-docker-dev]Unknown

    Source package: [docker.io]

    Details (2)

    • 20.10.24+dfsg1-1+deb12u1 · all · bookworm

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12

    • 20.10.24+dfsg1-1+deb12u1 · all · bookworm

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · bookworm; dsa · docker.io · debian · 12

[Debian 13 (Trixie)]

  • [docker-cli]Unknown

    Source package: [docker.io]

    Details (4)

    • 26.1.5+dfsg1-9+b13 · amd64 · trixie

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9+b13 · arm64 · trixie

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

  • [docker-doc]Unknown

    Source package: [docker.io]

    Details (4)

    • 26.1.5+dfsg1-9 · all · trixie

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9 · all · trixie

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9+deb13u1 · all · trixie-security

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9+deb13u1 · all · trixie-security

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

  • [docker.io]Unknown
    Details (4)

    • 26.1.5+dfsg1-9+b13 · amd64 · trixie

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9+b13 · arm64 · trixie

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

  • [golang-github-docker-docker-dev]Unknown

    Source package: [docker.io]

    Details (4)

    • 26.1.5+dfsg1-9 · all · trixie

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9 · all · trixie

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9+deb13u1 · all · trixie-security

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

    • 26.1.5+dfsg1-9+deb13u1 · all · trixie-security

      Fixed · Fixed: 19.03.11+dfsg1-1

      dsa · docker.io · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]