Privilege Escalation in Docker

ALTO 7.2CVE-2014-3499 · GHSA-wxj3-qwv4-cvfm · GO-2022-0752 · Published 11/07/2014 · updated 17/06/2026

Em resumo

CVE-2014-3499 é uma vulnerabilidade ALTO (CVSS 7.2) que afeta github.com/docker/docker, docker (docker).
Chance de exploração nos próximos 30 dias (EPSS): 0.39%, maior que 33.5% das vulnerabilidades.
Correção: atualize para 1.0.1 ou posterior.

Package	Affected versions	Patched versions
github.com/docker/docker Go	`< 1.0.1`	`1.0.1`
docker docker	`= 1.0.0`	No fix yet

Description

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

NVD description

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2014-3499 · ADVISORY
docker/docker commit 707ef96 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
rhn.redhat.com/errata/RHSA-2014-0820.html · WEB
web.nvd.nist.gov/view/vuln/detail · WEB
rhn.redhat.com/errata/RHSA-2014-0820.html · WEB
GitHub Advisory GHSA-wxj3-qwv4-cvfm · ADVISORY

Mais vulnerabilidades de github.com/docker/docker

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

github.com/docker/docker

< 1.0.1

1.0.1

docker

= 1.0.0

No fix yet

Description

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

NVD description

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

Mais vulnerabilidades de github.com/docker/docker

Ver tudo →