Red Hat Security Advisory

RHSA-2015:0623

docker security, bug fix, and enhancement update

Released 2015-03-05 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras docker-1.4.1-37.el7, docker-logrotate-1.4.1-37.el7, docker-python-0.7.1-37.el7 +1

Fixes 2 records

TI-2014-07591 CVE-2014-9357 · GHSA-997c-fj8j-rq5h

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a…

MEDIUM 52

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06202 Published 2014-12-16 Fixed in 1.3.3 CWE-264

TI-2014-07590 CVE-2014-9356 · GHSA-vj3f-3286-r4pf

Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to…

MEDIUM 45

Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or (2) build in a Docke…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.04923 Published 2019-12-02 Partial fix · 1.3.3 CWE-22