CVE-2014-8179

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during…

published December 4, 2019

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02733 · 86.0th percentile
Published
2019-12-04T15:10Z
EPSS history
Timeline
  • 04 DEC 15:10Z
    Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during…
    cvelistv5