vulnerability
Oracle Linux: CVE-2014-8178: ELSA-2015-3085: docker-engine security update (IMPORTANT) (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:N/C:N/I:C/A:N) | 2019-12-04 | 2024-10-16 | 2025-01-07 |
Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:C/A:N)
Published
2019-12-04
Added
2024-10-16
Modified
2025-01-07
Description
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands.
Solution
oracle-linux-upgrade-docker-engine
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.