CVE-2014-3499

Docker 1.0.0 - Unauthenticated Privilege Escalation via World-Writable Management Socket

Title source: llm
STIX 2.1

Description

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

References (2)

Core 2
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1111687
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0820.html

Scores

EPSS 0.0039
EPSS Percentile 31.8%

Details

CWE
CWE-264
Status published
Products (4)
docker/docker 1.0.0
docker/docker 0 - 1.0.1Go
fedoraproject/fedora 19
fedoraproject/fedora 20
Published Jul 11, 2014
Tracked Since Feb 18, 2026