Back to search
CVE-2014-8178
Published: Dec 4, 2019
Modified: Aug 6, 2024
PUBLISHED
Description
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands.
| Vendor | Product | Versions |
|---|---|---|
Docker | Docker Engine | affected before 1.8.3 |
Docker | CS Docker Engine | affected before 1.6.2-CS7 |
References
http://lists.opensuse.org/opensuse-updates/2015-10/msg00036.html
x_refsource_MISC
https://www.docker.com/legal/docker-cve-database
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now