An issue was discovered in Docker Engine before 19.03.11. An attacker in a container with the CAP_NET_RAW capability can craft IPv6 router advertisements and consequently spoof external IPv6 hosts obtain sensitive information or cause a denial of service.