CVE-2019-14271

9.8 criticalEPSS 19%

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-665
Published: 2019-07-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
docker:docker
opensuse:leap

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-v2cv-wwxq-qq97	Go	github.com/docker/docker	>=19.03.0 <19.03.1	19.03.1
GO-2024-2521	Go	github.com/docker/docker	<20.10.0-beta1+incompatible	20.10.0-beta1+incompatible
GO-2024-2521	Go	github.com/moby/moby	<20.10.0-beta1+incompatible	20.10.0-beta1+incompatible

References

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html
https://docs.docker.com/engine/release-notes/
https://github.com/moby/moby/issues/39449
https://seclists.org/bugtraq/2019/Sep/21
https://security.netapp.com/advisory/ntap-20190828-0003/

Check your stack JSON