Lucene search
HistoryDec 16, 2014 - 6:59 p.m.
CVE-2014-9358
cve-2014-9358
docker security
path traversal attack
repository spoofing
image validation
remote code execution
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
8.1 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.1%
Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) “docker load” operation or (2) “registry communications.”
Affected configurations
Node
dockerdockerRange≤1.3.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| docker:docker | docker | le | 1.3.2 |
Related
debiancve
debiancve
CVE-2014-9358
2014-12-16 18:59:16
ubuntucve
ubuntucve
CVE-2014-9358
2014-12-16 00:00:00
cvelist
cvelist
CVE-2014-9358
2014-12-16 18:00:00
nvd
nvd
CVE-2014-9358
2014-12-16 18:59:16
github
github
Directory Traversal in Docker
2022-02-15 00:41:14
osv
osv
Directory Traversal in Docker
2022-02-15 00:41:14
veracode
veracode
Directory Traversal
2017-05-03 08:48:29
cbl_mariner
cbl_mariner
CVE-2014-9358 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
prion
prion
Path traversal
2014-12-16 18:59:00
securityvulns
securityvulns
Docker 1.3.3 - Security Advisory [11 Dec 2014]
2014-12-22 00:00:00
Docker multiple security vulnerabilities
2014-12-22 00:00:00
nessus
nessus
Oracle Linux 6 / 7 : docker (ELSA-2014-3110)
2015-01-02 00:00:00
openSUSE Security Update : docker (openSUSE-SU-2014:1722-1)
2014-12-29 00:00:00
SUSE SLES12 Security Update : docker (SUSE-SU-2015:0082-1)
2015-05-20 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-461)
2015-09-08 00:00:00
Fedora Update for docker-io FEDORA-2014-16839
2015-01-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0082-1)
2021-04-19 00:00:00
oraclelinux
oraclelinux
docker security update
2014-12-30 00:00:00
amazon
amazon
Critical: docker
2014-12-11 16:40:00
fedora
fedora
[SECURITY] Fedora 21 Update: docker-io-1.4.0-1.fc21
2014-12-15 04:32:25
[SECURITY] Fedora 20 Update: docker-io-1.4.1-6.fc20
2015-01-26 02:35:37
archlinux
archlinux
docker: multiple issues
2014-12-15 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
8.1 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.1%
Related for CVE-2014-9358