CVE-2014-3499

Aliases:GHSA-wxj3-qwv4-cvfmGO-2022-0752CGA-255p-8f6w-jqq9CGA-28f8-qfhm-rjv7CGA-29gc-27hh-3x47CGA-5fjp-rgf5-3f82CGA-5vx6-xm6j-w6mpCGA-7hg7-rpf5-v97jCGA-7w3w-qqrp-2mphCGA-8c9f-6x76-9hmcCGA-jvh5-g88w-5v55CGA-mhmh-7pwg-xh2qCGA-mv4j-6mvq-4h94CGA-qgrg-6r3h-g7f3CGA-rgqp-2wfq-jhm6CGA-vr4f-q6pg-7r45CGA-wp4c-qv39-c74jCGA-x7v3-2grx-994m
Advisory lineage Upstream: 0 Downstream: 5
Modified
Published: 11 Jul 2014, 14:00
Last modified:06 Aug 2024, 10:43

Vulnerability Summary

Overall Risk (default)
medium
29/100
CVSS Score
7.2 HIGH
v2.0 (nvd)
EPSS Score
0.39% LOW
0% probability +0.36%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

11 Jul 2014, 14:00
Published
Vulnerability first disclosed
06 Aug 2024, 10:43
Last Modified
Vulnerability information updated

Description

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

CVSS Metrics

  • v3.1•HIGH•Score: 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.39%• Percentile: 33%

Techniques & Countermeasures

  • CWE-264•Permissions, Privileges, and Access Controls

    Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected Systems

  • chainguard•docker

    < 0

  • chainguard•docker-config-mirror-gcr

    < 0

  • chainguard•docker-dind

    < 0

  • chainguard•docker-init

    < 0

  • chainguard•docker-oci-entrypoint

    < 0

  • chainguard•dockerd

    < 0

  • chainguard•dockerd-oci-entrypoint

    < 0

  • chainguard•dockerd-service

    < 0

  • wolfi•docker

    < 0

  • wolfi•docker-config-mirror-gcr

    < 0

  • wolfi•docker-dind

    < 0

  • wolfi•docker-init

    < 0

  • wolfi•docker-oci-entrypoint

    < 0

  • wolfi•dockerd

    < 0

  • wolfi•dockerd-oci-entrypoint

    < 0

  • wolfi•dockerd-service

    < 0

  • docker•docker

    1.0.0

  • fedoraproject•fedora

    19 | 20

  • github.com/docker•docker

    < 1.0.1

References (7)