Read the docs

Docker

Records133All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical24CVSS 9.0–10.0
CVSS high66CVSS 7.0–8.9

Exploited now

Docker records in CISA KEV
TI-2019-11833 Docker Desktop Community Edition Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Docker 37 records CRITICAL Docker Desktop 18 records MEDIUM Desktop 13 records HIGH Engine 6 records MEDIUM Command Line Interface 2 records LOW Cs Engine 2 records LOW Libcontainer 2 records LOW Notary 2 records MEDIUM

Records

2 records in Cs Engine · all components

TI-2014-06794 CVE-2014-8179 · GHSA-7w47-v4xv-5crg

Improper input validation in Docker Engine

Priority LOW 38

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02733 Published 2019-12-04 Partial fix · 1.8.3, 1.6.2-CS7 CWE-20
TI-2014-06793 CVE-2014-8178 · GHSA-cx5m-7cfp-6prc

Improper input validation in Docker Engine

Priority LOW 25

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00493 Published 2019-12-04 Partial fix · 1.8.3, 1.6.2-CS7 CWE-20
Open these records in search →