CVE-2014-9356
Path Traversal in Docker
Summary
Path Traversal in Docker
Original description
The description as published by the source.
Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or (2) build in a Dockerfile.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
github.com/docker/docker
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.3.3"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2014-9356 docker.io Fixed in: 1.3.3~dfsg1-1
References
- advisory nvd.nist.gov
- package github.com
- web access.redhat.com
- web bugzilla.redhat.com
- web groups.google.com
- web web.nvd.nist.gov
- web securityfocus.com