Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Docker Component: Cs Engine Clear all filters
TI-2014-06794 CVE-2014-8179 · GHSA-7w47-v4xv-5crg

Improper input validation in Docker Engine

Priority LOW 38

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02733 Published 2019-12-04 Partial fix · 1.8.3, 1.6.2-CS7 CWE-20
TI-2014-06793 CVE-2014-8178 · GHSA-cx5m-7cfp-6prc

Improper input validation in Docker Engine

Priority LOW 25

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00493 Published 2019-12-04 Partial fix · 1.8.3, 1.6.2-CS7 CWE-20