CVE-2014-9357

Source
https://nvd.nist.gov/vuln/detail/CVE-2014-9357
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-9357.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2014-9357
Aliases
Downstream
Related
Published
2014-12-16T18:59:15Z
Modified
2025-08-09T19:01:28Z
Summary
[none]
Details

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.

References

Affected packages