CVE-2020-14298

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.

• CWE-273

• https://access.redhat.com/errata/RHBA-2020:0427Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2020-14298Vendor Advisory
• https://access.redhat.com/security/vulnerabilities/runcescapeVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-5736Issue Tracking, Patch, Vendor Advisory
• https://access.redhat.com/errata/RHBA-2020:0427Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2020-14298Vendor Advisory
• https://access.redhat.com/security/vulnerabilities/runcescapeVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-5736Issue Tracking, Patch, Vendor Advisory

Published

Jul 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14292In the COVIDSafe application through 1.0.21 for Android, uns…5.7
• CVE-2020-14293conf_datetime in Secudos DOMOS 5.8 allows remote attackers t…7.5
• CVE-2020-14294An issue was discovered in Secudos Qiata FTA 1.70.19. The co…6.1
• CVE-2020-14295A SQL injection issue in color.php in Cacti 1.2.12 allows an…7.2
• CVE-2020-14296Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side R…7.1
• CVE-2020-14297A flaw was discovered in Wildfly's EJB Client as shipped wit…6.5
• CVE-2020-14299A flaw was found in JBoss EAP, where the authentication conf…6.5
• CVE-2020-1430An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-14300The docker packages version docker-1.13.1-108.git4ef4b30.el7…8.8
• CVE-2020-14301An information disclosure vulnerability was found in libvirt…6.5
• CVE-2020-14302A flaw was found in Keycloak before 13.0.0 where an external…4.9
• CVE-2020-14303A flaw was found in the AD DC NBT server in all Samba versio…7.5