CVE-2014-3499: High severity Docker docker vulnerability
Published Jun 20, 2014
·Updated
Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.
Affected Software
3 affected components
Docker docker=1.0.0
Fedoraproject Fedora=19
Fedoraproject Fedora=20
Event History
Jun 20, 2014
Data Sourced
via Red Hat·05:58 PM
DescriptionSeverityAffected Software
Jul 11, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3499?
The severity of CVE-2014-3499 is classified as high due to its potential to allow local users to gain elevated privileges.
2
How do I fix CVE-2014-3499?
To fix CVE-2014-3499, restrict the permissions on the Docker management socket to prevent world-readable and world-writable access.
3
Which versions of Docker are affected by CVE-2014-3499?
CVE-2014-3499 specifically affects Docker version 1.0.0.
4
Are any Fedora versions impacted by CVE-2014-3499?
Yes, Fedora versions 19 and 20 are also affected by CVE-2014-3499.
5
What type of vulnerability is CVE-2014-3499?
CVE-2014-3499 is a permissions vulnerability that allows local users to exploit Docker's management socket.