Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2014-9357

Опубликовано: 16 дек. 2014
Источник: debian
EPSS Средний

Описание

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
docker.iofixed1.3.3~dfsg1-1package

EPSS

Процентиль: 98%
0.49229
Средний

Связанные уязвимости

ubuntu
больше 10 лет назад

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

redhat
больше 10 лет назад

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

nvd
больше 10 лет назад

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

CVSS3: 9.8
github
больше 3 лет назад

Arbitrary Code Execution

oracle-oval
больше 10 лет назад

ELSA-2014-3110: docker security update (IMPORTANT)

EPSS

Процентиль: 98%
0.49229
Средний