CVE-2014-0048

Опубликовано: 02 янв. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.

Ссылки

http://www.openwall.com/lists/oss-security/2015/03/24/18
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/24/22
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/24/23
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2014-0048
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0048
Issue Tracking
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0048
Issue Tracking
Third Party Advisory
https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
Issue Tracking
Mailing List
https://security-tracker.debian.org/tracker/CVE-2014-0048
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/24/18
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/24/22
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/24/23
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2014-0048
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0048
Issue Tracking
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0048
Issue Tracking
Third Party Advisory
https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
Issue Tracking
Mailing List
https://security-tracker.debian.org/tracker/CVE-2014-0048
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*

Версия до 1.5.0 (исключая)

Конфигурация 2

cpe:2.3:a:apache:geode:1.12.0:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.07276

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2014-0048

CVSS3: 9.8

ubuntu

почти 7 лет назад

An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.

CVE-2014-0048

redhat

больше 11 лет назад

An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.

CVE-2014-0048

CVSS3: 9.8

msrc

больше 5 лет назад

An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.

CVE-2014-0048

CVSS3: 9.8

debian

почти 7 лет назад

An issue was found in Docker before 1.6.0. Some programs and scripts i ...

GHSA-hr9j-w8vh-74wj

CVSS3: 9.8

github

больше 4 лет назад

An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.

EPSS

Процентиль: 94%

0.07276

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20