The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade docker.io | Jul 30, 2024 | Dec 16, 2014 |
| Docker | — | Upgrade to Docker v1.3.3 | May 4, 2017 | Dec 16, 2014 |
| Oracle_linux | — | Upgrade docker-pkg-develUpgrade dockerUpgrade docker-devel | Oct 16, 2024 | Dec 16, 2014 |
| Suse | — | Upgrade docker-fish-completionUpgrade dockerUpgrade docker-bash-completion | Dec 18, 2015 | Dec 16, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub