CVE-2014-9358
Directory Traversal in Docker
Summary
Directory Traversal in Docker
Original description
The description as published by the source.
Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
github.com/docker/docker
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.3.2"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2014-9358 docker.io Fixed in: 1.3.3~dfsg1-1
References
- advisory nvd.nist.gov
- web access.redhat.com
- web groups.google.com
- web groups.google.com
- web web.nvd.nist.gov
- web securityfocus.com