Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-9357

Опубликовано: 16 дек. 2014
Источник: ubuntu
Приоритет: high
EPSS Средний
CVSS2: 10

Описание

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

РелизСтатусПримечание
devel

not-affected

1.3.3~dfsg1-2ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
lucid

DNE

precise

DNE

trusty

not-affected

trusty/esm

DNE

trusty was not-affected
upstream

released

1.3.3
utopic

not-affected

Показывать по

EPSS

Процентиль: 98%
0.49229
Средний

10 Critical

CVSS2

Связанные уязвимости

redhat
больше 10 лет назад

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

nvd
больше 10 лет назад

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

debian
больше 10 лет назад

Docker 1.3.2 allows remote attackers to execute arbitrary code with ro ...

CVSS3: 9.8
github
больше 3 лет назад

Arbitrary Code Execution

oracle-oval
больше 10 лет назад

ELSA-2014-3110: docker security update (IMPORTANT)

EPSS

Процентиль: 98%
0.49229
Средний

10 Critical

CVSS2