Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-13401

22
FAUCET Score

CVE-2020-13401 is a medium-severity vulnerability affecting Docker Engine before version 19.03.11, as well as products from Broadcom, Debian, and Fedora Project. An attacker with CAP_NET_RAW capability within a container can craft IPv6 router advertisements, leading to spoofing of external IPv6 hosts, information disclosure, or denial of service. The attack requires low privileges and high attack complexity, with potential for limited impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 19.03.11CPE matchmatch criteria
cpe:2.3:a:docker:engine:*:*:*:*:*:*:*:*
31CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
32CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
10.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:broadcom:sannav:-:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.0MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
Exploitability Score
1.8
Impact Score
3.7
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.84%
Probability of exploitation in next 30 days
EPSS Percentile
85.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0284 is in the 92nd percentile among its peer group of 1,425 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

gopatch availablevia ghsa
Product: github.com/docker/docker-ceFixed in: 19.03.11
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: docker

Vendor Advisories (2)

goGHSA-qrrc-ww9x-r43gmedium

Improper Input Validation in Docker Engine

Feb 15, 2022
redhatCVE-2020-13401Moderate

docker: IPv6 router advertisements allow for MitM attacks

Jun 1, 2020

References

lists.opensuse.org / opensuse-security-announce/2020-06/msg00040.html
Broken Link
docs.docker.com / engine/release-notes
Release NotesVendor Advisory
github.com / docker/docker-ce/releases/tag/v19.03.11
Release NotesThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/DN4JQAOXBE3XUNK3FD423LHE3K74EMJT
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/KJZLKRCOJMOGUIJI2AS27BOZS3RBEF3K
security.gentoo.org / glsa/202008-15
Third Party Advisory
security.netapp.com / advisory/ntap-20200717-0002
Third Party Advisory
debian.org / security/2020/dsa-4716
Third Party Advisory
openwall.com / lists/oss-security/2020/06/01/5
Mailing ListThird Party Advisory