CVE-2014-9356: Path Traversal
A problem was reported by Docker Inc. whereby a malicious image could overwrite arbitrary portions of the host filesystem by including absolute symlinks. From the upstream report:
"Path traversal attacks are possible in the processing of absolute symlinks. In checking symlinks for traversals, only relative links were considered. This allowed path traversals to exist where they should have otherwise been prevented. This was exploitable via both archive extraction and through volume mounts.
This vulnerability allowed malicious images or builds from malicious Dockerfiles to write files to the host system and escape containerization, leading to privilege escalation."
Other sources
Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or (2) build in a Dockerfile.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is CVE-2014-9356?
CVE-2014-9356 is a path traversal vulnerability in Docker before version 1.3.3.
What is the severity of CVE-2014-9356?
The severity of CVE-2014-9356 is high, with a CVSS score of 8.6.
How does CVE-2014-9356 work?
CVE-2014-9356 allows remote attackers to write to arbitrary files and bypass container protection mechanisms using a symlink in an image or Dockerfile.
Which software versions are affected by CVE-2014-9356?
Versions of Docker before 1.3.3 are affected by CVE-2014-9356.
How can CVE-2014-9356 be remediated?
To fix CVE-2014-9356, update Docker to version 1.3.3 or later.