p PatchFirst

CVE-2014-9358

CVE-2014-9358

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • docker.io Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.3.3~dfsg1-1

    Update to 1.3.3~dfsg1-1

  • docker.io Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.3.3~dfsg1-1

    Update to 1.3.3~dfsg1-1

  • docker.io Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.3.3~dfsg1-1

    Update to 1.3.3~dfsg1-1

Original sources

Check your server →