CVE-2014-9358
docker docker: no CVSS score yet. EPSS 2.5% chance of exploitation in the next 30 days. Fixed in github.com/docker/docker 1.3.2.
Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."
- EPSS
- 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- docker:docker
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-qmmc-jppf-32wv | Go | github.com/docker/docker | <1.3.2 | 1.3.2 |
| GO-2022-0705 | Go | github.com/docker/docker | <1.3.2 | 1.3.2 |