CVE-2014-0048
CVE-2014-0048
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.
CVSS 9.8 · Critical · EPSS 7.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
docker.io
- Versions
- before 1.6.0: Affected
No fix published
docker.io Debian:12
- Affected ranges
- ECOSYSTEM: < 1.6.0+dfsg1-1
Update to 1.6.0+dfsg1-1
docker.io Debian:13
- Affected ranges
- ECOSYSTEM: < 1.6.0+dfsg1-1
Update to 1.6.0+dfsg1-1
docker.io Debian:14
- Affected ranges
- ECOSYSTEM: < 1.6.0+dfsg1-1
Update to 1.6.0+dfsg1-1
docker.io Ubuntu:14.04:LTS
- Versions
- 0.6.7+dfsg1-1
- 0.6.7+dfsg1-2
- 0.6.7+dfsg1-3
- 0.7.1+dfsg1-1
- 0.7.6+dfsg1-1
- 0.8.1+dfsg1-1
- 0.9.1~dfsg1-2
- 1.0.1~dfsg1-0ubuntu1~ubuntu0.14.04.1
- Affected ranges
- ECOSYSTEM: < 1.6.2~dfsg1-1ubuntu4~14.04.1
Update to 1.6.2~dfsg1-1ubuntu4~14.04.1
docker.io Ubuntu:16.04:LTS
- Versions
- 1.6.2~dfsg1-1ubuntu4
- 1.10.2-0ubuntu3
- 1.10.2-0ubuntu4
- 1.10.3-0ubuntu1
- 1.10.3-0ubuntu4
- 1.10.3-0ubuntu5
- Affected ranges
- ECOSYSTEM: < 1.10.3-0ubuntu6
Update to 1.10.3-0ubuntu6
Original sources
- https://security-tracker.debian.org/tracker/CVE-2014-0048
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0048
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0048
- https://access.redhat.com/security/cve/cve-2014-0048
- http://www.openwall.com/lists/oss-security/2015/03/24/23
- http://www.openwall.com/lists/oss-security/2015/03/24/18
- http://www.openwall.com/lists/oss-security/2015/03/24/22
- https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
- https://nvd.nist.gov/vuln/detail/CVE-2014-0048