Privilege Escalation in Docker

ALTO 7.2CVE-2014-3499 · GHSA-wxj3-qwv4-cvfm · GO-2022-0752 · Published 11/07/2014 · updated 17/06/2026

En resumen

CVE-2014-3499 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a github.com/docker/docker, docker (docker).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.39%, mayor que el 33.5% de las vulnerabilidades.
Solución: actualizar a 1.0.1 o posterior.

Package	Affected versions	Patched versions
github.com/docker/docker Go	`< 1.0.1`	`1.0.1`
docker docker	`= 1.0.0`	No fix yet

Description

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

NVD description

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2014-3499 · ADVISORY
docker/docker commit 707ef96 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
rhn.redhat.com/errata/RHSA-2014-0820.html · WEB
web.nvd.nist.gov/view/vuln/detail · WEB
rhn.redhat.com/errata/RHSA-2014-0820.html · WEB
GitHub Advisory GHSA-wxj3-qwv4-cvfm · ADVISORY

Más vulnerabilidades de github.com/docker/docker

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

github.com/docker/docker

< 1.0.1

1.0.1

docker

= 1.0.0

No fix yet

Description

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

NVD description

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

Más vulnerabilidades de github.com/docker/docker

Ver todo →