CVE-2024-5652 - In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode

Back Back to CVE browser

MEDIUM

In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode

Published Jul 9, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.37%

Description

In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode.

Affected products

Vendor Docker Inc. Product Docker Desktop Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <v4.31.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Docker Inc.

Docker Desktop

unaffected

Version	Status	Constraints
0	affected	<v4.31.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (1)

https://docs.docker.com/desktop/release-notes/#4310
release-notesRelease Notes

Link	Providers	Tags
https://docs.docker.com/desktop/release-notes/#4310		release-notesRelease Notes

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Docker

Published Jul 9, 2024

Updated Mar 19, 2025

Reserved Jun 5, 2024

Link CVE-2024-5652

CISA Vulnrichment

Updated Jul 23, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-5652

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-5652