CVE-2014-9358

Source
https://cve.org/CVERecord?id=CVE-2014-9358
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-9358.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2014-9358
Aliases
Downstream
Related
Withdrawn
2026-01-27T04:13:31.067672Z
Published
2014-12-16T18:59:16Z
Modified
2026-01-27T04:13:31.067672Z
Summary
[none]
Details

Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

References

Affected packages