Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-5282

Fixed in a distro release EPSS 1%

Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'.

Published 2018-02-06 · CVE record · OSV

Products: docker

Distro releases

ReleasePackageFixed in
Debian 12docker.io1.3.0~dfsg1-1
Debian 13docker.io1.3.0~dfsg1-1
Debian 14docker.io1.3.0~dfsg1-1