¡¾·ì϶¹«¸æ¡¿Docker Desktop ÈÝÆ÷ԽȨ½Ó¼û·ì϶(CVE?2025?9074)

°ä²¼¹¦·ò 2025-08-22

Ò»¡¢¡¢¡¢·ì϶¸ÅÊö


·ì϶Ãû³Æ

Docker DesktopÈÝÆ÷ԽȨ½Ó¼û·ì϶

CVE   ID

CVE-2025-9074

·ì϶ÀàÐÍ

ԽȨ½Ó¼û

·¢ÏÖ¹¦·ò

2025-08-22

·ì϶ÆÀ·Ö

9.3

·ì϶µÈ¼¶

ÑÏÖØ

¹¥»÷ÏòÁ¿

±¾µØ

ËùÐèȨÏÞ

ÎÞ

ÀûÓÃÄѶÈ

µÍ

Óû§½»»¥

±ØÒª

PoC/EXP

δ¹«¿ª

ÔÚÒ°ÀûÓÃ

δ·¢ÏÖ


Docker DesktopÊÇDocker¹Ù·½ÌṩµÄÒ»¿î×ÀÃæ¶ËÀûÓ㬣¬£¬ÖØÒªÓÃÓÚÔÚWindowsºÍmacOSϵͳÉϱã½ÝµØÔËÐкÍÖÎÀíLinuxÈÝÆ÷¡£¡£Ëü¼¯³ÉÁËDocker Engine¡¢¡¢¡¢Docker CLI¡¢¡¢¡¢Docker ComposeµÈÖ÷Ìâ×é¼þ£¬£¬£¬²¢Ö§³ÖWSL 2ºó¶Ë¡¢¡¢¡¢Kubernetes¼¯ÈºµÈÖ°ÄÜ£¬£¬£¬ÊʺϿª·¢ÕßÔÚ±¾µØ¹¹½¨¡¢¡¢¡¢²âÊԺ͵÷ÊÔÈÝÆ÷»¯ÀûÓᣡ£Óû§¿Éͨ¹ýͼÐνçÃæ»òºÅÁîÐиßЧÖÎÀíÈÝÆ÷¡¢¡¢¡¢¾µÏñºÍÍøÂç×ÊÔ´£¬£¬£¬ÊÇ¿ª·¢»·¾³Öг£ÓõÄÈÝÆ÷ÖÎÀí¹¤¾ß¡£¡£


2025Äê8ÔÂ22ÈÕ£¬£¬£¬OG¶«·½Ìü¼¯ÍÅVSRC¼à²âµ½Docker Desktop´æÔÚÈÝÆ÷ԽȨ½Ó¼û·ì϶,¸Ã·ì϶ÔÊÐí±¾µØÔËÐеĶñÒâLinuxÈÝÆ÷Èƹý¸ôÀë»úÖÆ£¬£¬£¬Í¨¹ýĬÈÏ×ÓÍø£¨192.168.65.7:2375£©Ö±½Ó½Ó¼ûDocker Engine API¡£¡£¸Ã·ì϶²»ÒÀÀµ¹ÒÔØDocker socket£¬£¬£¬Ò²²»ÊÜ¡°Expose daemon on tcp://localhost:2375 without TLS¡±¿ª¹Ø»òEnhanced Container Isolation£¨ECI£©ÉèÖÃÓ°Ïì¡£¡£Ò»µ©±»ÀûÓ㬣¬£¬¹¥»÷Õß¿ÉÖ´Ðд´½¨ºÍ½ÚÖÆÈÝÆ÷¡¢¡¢¡¢ÖÎÀí¾µÏñµÈ¸ßȨÏÞ²Ù×÷£¬£¬£¬ÉõÖÁÔÚWindows+WSL»·¾³Ï¹ÒÔØËÞÖ÷»ú´ÅÅ̲¢½Ó¼ûÓû§¼¶È¨ÏÞÎļþ¡£¡£·ì϶ÆÀ·Ö9.3£¬£¬£¬·ì϶¼¶±ðÑÏÖØ¡£¡£


¶þ¡¢¡¢¡¢Ó°ÏìÁìÓò


Docker Desktop < 4.44.3¡£¡£


Èý¡¢¡¢¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑ°ä²¼°²È«²¹¶¡£¬£¬£¬Éý¼¶ÖÁDocker Desktop 4.44.3¼°ÒÔÉÏ¡£¡£
ÏÂÔØÁ´½Ó£º£º£º
https://docs.docker.com/desktop/release-notes/#4443/


3.2 һʱ´ëÊ©


ÔÝÎÞ¡£¡£


3.3 ͨÓý¨Òé


? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬Ï÷¼õϵͳ·ì϶£¬£¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£
? ¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÖÆ£¬£¬£¬Åú¸Ä·À»ðǽսÊõ£¬£¬£¬¹Ø±Õ·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢¡¢¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£
? Ê¹ÓÃÆóÒµ¼¶°²È«²úÆ·£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£
? ¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÖƺÍ×îСȨÏÞ×¼Ôò£¬£¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏ޶ȡ£¡£
? ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£


3.4 ²Î¿¼Á´½Ó


https://docs.docker.com/desktop/release-notes/
https://www.cve.org/CVERecord?id=CVE-2025-9074
https://thecyberexpress.com/critical-cve-2025-9074-docker-vulnerability/