Approved changes feed: RSS · Atom

cpe:2.3:a:docker:docker:1.0.0:*:*:*:*:*:*:*

part: a version: 1.0.0 update: *

VendorDocker (fb312c2d-be4d-5919-b619-61409dcafa2c)
ProductDocker (c8c9d969-271a-5fc1-a74d-e1a37f1d19cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/docker purl2cpe 2026-06-01 10:13:10.918336
pkg:deb/ubuntu/docker purl2cpe 2026-06-01 10:13:10.918338
pkg:github/docker/docker-install purl2cpe 2026-06-01 10:13:10.918339

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6407 vulnerable 2026-06-03 14:34:13.943828 Details available
Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.
Published: 2014-12-12T15:00:00.000Z
Updated: 2024-08-06T12:17:23.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3499 vulnerable 2026-06-03 14:33:54.869348 Details available
Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.
Published: 2014-07-11T14:00:00.000Z
Updated: 2024-08-06T10:43:06.319Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.