NVD

Id
36072  
Name
CVE-2014-9358  
Description
Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-12-16  
Modified Date
2014-12-30  
Seq
2014-9358  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184431 36072 CVE-2014-9358 20141212 Docker 1.3.3 - Security Advisory [11 Dec 2014]  View
184432 36072 CVE-2014-9358 https://groups.google.com/forum/#!msg/docker-user/nFAz-B-n4Bw/0wr3wvLsnUwJ  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18385 JVNDB-2014-007260 Docker におけるパストラバーサル攻撃を実行される脆弱性 Docker は、イメージ ID を適切に検証しないため、パストラバーサル攻撃を実行され、リポジトリを偽装される脆弱性が存在します。 CVE-2014-9358 76651 CVE-2014-9358 36072 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007260.html 2014-12-11 2014-12-19 View