Vulnetix
Try Vulnetix Request Demo
CVE-2014-8179 PUBLISHED

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation.

EPSS 0.69% · 71.7th percentile

Risk Scores

EPSS Score
0.69%
71.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSdocker.io0, 1.6.2~dfsg1-1ubuntu4, 1.10.2-0ubuntu3

Timeline

References

Open in Interactive Console →