CVE-2014-8178

CVE-2014-8178: falha em Docker Engine

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Docker Engine+ Monitorar CS Docker Engine

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.5%
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands.
Produtos afetados
Docker · CS Docker EngineDocker · Docker Engine
CVEs relacionadas — Docker Engine

No mesmo produto, das mais perigosas para as menos.

CVE-2014-8179—CVE-2014-8179EPSS 2.7%CVE-2026-17106HIGHTar extraction in moby/go-archive can write outside the destination directory via link followingEPSS 0.4%CVE-2026-92543HIGHDocker Engine insecure-registry fallback via malicious DNS responsesEPSS 0.1%CVE-2026-92542MEDIUMBlind VXLAN injection into encrypted overlay networks from cluster peerEPSS 0.1%