Approved changes feed: RSS · Atom

cpe:2.3:a:docker:docker:1.3.2:*:*:*:*:*:*:*

part: a version: 1.3.2 update: *

VendorDocker (fb312c2d-be4d-5919-b619-61409dcafa2c)
ProductDocker (c8c9d969-271a-5fc1-a74d-e1a37f1d19cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/docker purl2cpe 2026-06-01 10:13:11.008075
pkg:deb/ubuntu/docker purl2cpe 2026-06-01 10:13:11.008077
pkg:github/docker/docker-install purl2cpe 2026-06-01 10:13:11.008078

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9357 vulnerable 2026-06-03 14:34:26.649180 Details available
Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.
Published: 2014-12-16T18:00:00.000Z
Updated: 2024-08-06T13:40:25.038Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.