CVE-2023-5165

Summary

CVE-2023-5165 is a vulnerability in Docker Desktop versions before 4.23.0 that enables unprivileged users to bypass Enhanced Container Isolation (ECI) restrictions. This can be achieved through the debug shell, which remains accessible for a brief period following the launch of Docker Desktop. This vulnerability only affects Docker Business customers and requires a non-root environment. The issue has been rectified in Docker Desktop 4.23.0. Previous affected versions range from 4.13.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.