Docker CVEs — PoCs and detection rules¶
6 Docker vulnerabilities with detection-only proof-of-concept code and Docker labs; 6 ship ready-to-deploy detection and prevention rules (Snort, YARA, Nginx, Apache). For authorized testing and blue-team detection engineering.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-23652 — BuildKit Symlink | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41110 — Docker AuthZ Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23653 — BuildKit GRPC Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8695 — Docker Desktop RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8696 — Docker Desktop RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23651 — BuildKit Mount Race | High (8.7) | Snort, YARA, Nginx, Apache | ✅ |