Debian Linux Security Advisory 4716-1 - Etienne Champetier discovered that Docker, a Linux container runtime, created network bridges which by default accept IPv6 router advertisements. This could allow an attacker with the CAP_NET_RAW capability in a container to spoof router advertisements, resulting in information disclosure or denial of service.
976ff74ee264ecd7bc43b910ba7569f08c64d05307bf0989ad61ef28957a457e