vulnerability
Oracle Linux: CVE-2014-8178: ELSA-2015-3085: docker-engine security update (IMPORTANT)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:M/Au:N/C:N/I:P/A:N) | Dec 4, 2019 | Oct 16, 2024 | Dec 3, 2025 |
Severity
2
CVSS
(AV:L/AC:M/Au:N/C:N/I:P/A:N)
Published
Dec 4, 2019
Added
Oct 16, 2024
Modified
Dec 3, 2025
Description
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands.
Solution
oracle-linux-upgrade-docker-engine
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.