CVE-2014-8178

5.5

MEDIUMCVSS v3

Published

December 17, 2019

CVSS v2

1.9 LOW

Affected

12 projects

Assigned by

Red Hat

Severity scale

010

Description

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands.

moby/moby

GitHubThe Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

NVD

docker

Docker HubDocker in Docker! (commonly known as "dind")

< 1.8.3NVD

home-assistant/docker

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Home Assistant containers

< 1.8.3NVD

Docker

Visual Studio MarketplaceMakes it easy to create, manage, and debug containerized applications.

< 1.8.3NVD

docker

NPMStatic documentation generator based on docco

< 1.8.3NVD

docker

RubyGemsProvides an OOP interface to docker's command-line interface without relying on its HTTP API.

< 1.8.3NVD

xeger/docker

GitHubWrapper for Docker CLI.

< 1.8.3NVD

docker

Crates.ioDocker Remote API in Rust

< 1.8.3NVD

docker

Python Package IndexA Python library for the Docker Engine API.

< 1.8.3NVD

jbt/docker

GitHubDocumentation generator

< 1.8.3NVD

tomsquest/docker

GitHubOfficial docker-composer for wallabag.

< 1.8.3NVD

WeblateOrg/docker

GitHubOfficial Docker container for Weblate, a libre software web-based continuous localization system

< 1.8.3NVD

Security Advisories

CVE-2014-8178

Description

More on this CVE