Red Hat Security Advisory

RHSA-2014:0820

docker security update

Released 2014-07-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras docker-0.11.1-22.el7

Fixes 1 record

TI-2014-02826 CVE-2014-3499 · GHSA-wxj3-qwv4-cvfm

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket…

LOW 32

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00393 Published 2014-07-11 Fixed in 1.0.1 CWE-264