CVE-2014-0048: Input Validation
Published Jan 2, 2020
·Updated
An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.
Affected Software
3 affected componentsFixes available
Docker Docker<1.5.0
Apache Geode=1.12.0
debian/docker.io
20.10.5+dfsg1-1+deb11u220.10.5+dfsg1-1+deb11u420.10.24+dfsg1-1+deb12u126.1.5+dfsg1-927.5.1+dfsg4-1
Event History
Jan 2, 2020
CVE Published
via MITRE·04:22 PM
Data Sourced
via MITRE·04:22 PM
DescriptionWeakness
Feb 18, 2026
Data Sourced
via Debian·06:00 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2014-0048?
CVE-2014-0048 is a vulnerability found in Docker before version 1.6.0.
2
How does CVE-2014-0048 affect Docker?
CVE-2014-0048 allows programs and scripts in Docker to be downloaded via HTTP and then executed or used in unsafe ways.
3
What is the severity of CVE-2014-0048?
CVE-2014-0048 has a severity rating of 9.8 (Critical).
4
Which versions of Docker are affected by CVE-2014-0048?
CVE-2014-0048 affects Docker versions before 1.6.0.
5
How can I fix CVE-2014-0048 in Docker?
To fix CVE-2014-0048, update your Docker installation to version 1.6.0 or newer.