PT-2014-5361 · Docker+1 · Docker+1

Published 2014-07-11 · Updated 2025-10-11 · CVE-2014-3499

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Docker version 1.0.0

Description The issue allows local users to gain privileges due to world-readable and world-writable permissions on the management socket. This is a case of privilege escalation.

Recommendations For Docker version 1.0.0, consider restricting access to the management socket to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-264

Related Identifiers

CVE-2014-3499

GHSA-WXJ3-QWV4-CVFM

GO-2022-0752

OPENSUSE-SU-2024:10532-1

OPENSUSE-SU-2025:15589-1

RHSA-2014:0820

SUSE-SU-2025:03540-1

SUSE-SU-2025:03545-1

Affected Products

Docker

Suse

References · 258

• https://osv.dev/vulnerability/openSUSE-SU-2024:10532-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3499 · Security Note
• http://rhn.redhat.com/errata/RHSA-2014-0820.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03545-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15589-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03540-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wxj3-qwv4-cvfm · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0752 · Vendor Advisory
• https://github.com/docker/docker/commit/707ef9618b3b26a0534a0af732a22f159eccfaa5 · Note
• https://bugzilla.suse.com/1032287 · Note
• https://suse.com/security/cve/CVE-2021-41091 · Note
• https://bugzilla.suse.com/1037436 · Note
• https://bugzilla.suse.com/907012 · Note
• https://bugzilla.suse.com/1122469 · Note
• https://bugzilla.suse.com/999582 · Note