Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-9357

Опубликовано: 16 дек. 2014
Источник: ubuntu
Приоритет: high
EPSS Средний
CVSS2: 10

Описание

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

РелизСтатусПримечание
devel

not-affected

1.3.3~dfsg1-2ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
lucid

DNE

precise

DNE

trusty

not-affected

trusty/esm

DNE

trusty was not-affected
upstream

released

1.3.3
utopic

not-affected

Показывать по

EPSS

Процентиль: 95%
0.20452
Средний

10 Critical

CVSS2

Связанные уязвимости

redhat
около 11 лет назад

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

nvd
около 11 лет назад

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

debian
около 11 лет назад

Docker 1.3.2 allows remote attackers to execute arbitrary code with ro ...

CVSS3: 9.8
github
почти 4 года назад

Arbitrary Code Execution

oracle-oval
около 11 лет назад

ELSA-2014-3110: docker security update (IMPORTANT)

EPSS

Процентиль: 95%
0.20452
Средний

10 Critical

CVSS2