Corregido en
Comprueba tu versión
docker --versionCVE que afectan a 1.3
| CVE | Título | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|
| CVE-2019-15752 | Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan hors... | 7.8 | KEV | 48.8% | 2019-08-29 |
| CVE-2014-9357 | Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or... | 10.0 | — | 2014-12-17 | |
| CVE-2014-0048 | An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and the... | 9.8 | — | 2020-01-03 | |
| CVE-2019-5736 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the h... | 8.6 | — | 2019-02-11 | |
| CVE-2014-9356 | Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and by... | 8.6 | — | 2019-12-03 | |
| CVE-2019-13139 | In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "dock... | 8.4 | — | 2019-08-23 | |
| CVE-2016-3697 | libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric U... | 7.8 | — | 2016-06-02 | |
| CVE-2014-0047 | Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage. | 7.8 | — | 2017-10-07 | |
| CVE-2021-3162 | Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege e... | 7.8 | — | 2021-01-16 | |
| CVE-2022-25365 | Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists becau... | 7.8 | — | 2022-02-19 | |
| CVE-2014-6407 | Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) s... | 7.5 | — | 2014-12-13 | |
| CVE-2019-13509 | In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10),... | 7.5 | — | 2019-07-19 | |
| CVE-2019-16884 | runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction b... | 7.5 | — | 2019-09-25 | |
| CVE-2014-8179 | Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the ma... | 7.5 | — | 2019-12-05 | |
| CVE-2015-3627 | Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before perfo... | 7.2 | — | 2015-05-19 | |
| CVE-2015-3630 | Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latenc... | 7.2 | — | 2015-05-19 | |
| CVE-2021-21284 | privilege escalation in Moby | 6.8 | — | 2021-02-03 | |
| CVE-2017-14992 | Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17... | 6.5 | — | 2017-11-02 | |
| CVE-2021-21285 | Docker daemon crash during image pull of malicious image | 6.5 | — | 2021-02-03 | |
| CVE-2014-9358 | Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traver... | 6.4 | — | 2014-12-17 | |
| CVE-2014-8178 | Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to st... | 5.5 | — | 2019-12-05 | |
| CVE-2020-27534 | util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsa... | 5.3 | — | 2020-12-31 | |
| CVE-2014-5277 | Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fai... | 5.0 | — | 2014-11-18 | |
| CVE-2014-6408 | Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and p... | 5.0 | — | 2014-12-13 | |
| CVE-2015-3631 | Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t polic... | 3.6 | — | 2015-05-19 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).