PT-2019-7141 · Docker+1 · Docker Engine+2

Publicado

2015-10-14

·

Atualizado

2025-10-11

·

CVE-2014-8178

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 1.8.3 CS Docker Engine versions prior to 1.6.2-CS7
Description The issue makes it easier for attackers to poison the image cache via a crafted image in pull or push commands, due to the lack of a globally unique identifier to store image layers.
Recommendations For Docker Engine versions prior to 1.8.3, update to version 1.8.3 or later to resolve the issue. For CS Docker Engine versions prior to 1.6.2-CS7, update to version 1.6.2-CS7 or later to resolve the issue.

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-8178
MGASA-2016-0043
OPENSUSE-SU-2024:10532-1
OPENSUSE-SU-2025:15589-1
SUSE-SU-2015:1757-1
SUSE-SU-2015_1757-1
SUSE-SU-2025:03540-1
SUSE-SU-2025:03545-1

Produtos afetados

Docker
Docker Engine
Suse