CVE-2020-15360: 
Docker Desktop vulnerability analysis and mitigation

A privilege escalation vulnerability was discovered in Docker Desktop version 2.3.0.3, specifically in the com.docker.vmnetd component. The vulnerability exists due to a lack of client verification during communication between the vmnetd service (running with root privileges) and Docker clients (Docker Release Notes, WhiteHat Blog).

The vulnerability exists in the com.docker.vmnetd launch service that runs with root authority and communicates with Docker clients through a local socket. During the communication process, there is no client verification implemented. The main functions involved are vmnet_handshake_Perform and vmnetd_commands_Handle, where vmnet_handshake_Perform initializes messages and obtains client commands, while vmnetd_commands_Handle executes corresponding callback functions based on the received commands (WhiteHat Blog).

The vulnerability allows local attackers to escalate their privileges to root level due to the lack of proper client verification in the vmnetd service (CISA Bulletin).

The vulnerability can be exploited by a local attacker by communicating with the vmnetd service through the local socket, taking advantage of the missing client verification to execute privileged commands (WhiteHat Blog).

Users should upgrade to a version newer than Docker Desktop 2.3.0.3 which contains the fix for this vulnerability (Docker Release Notes).