CVE-2014-5278

A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
VendorProductVersion
dockerdocker
𝑥
< 1.2.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
docker.io
bullseye
20.10.5+dfsg1-1+deb11u2
fixed
bullseye (security)
20.10.5+dfsg1-1+deb11u3
fixed
bookworm
20.10.24+dfsg1-1
fixed
trixie
26.1.5+dfsg1-2
fixed
sid
26.1.5+dfsg1-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
docker.io
eoan
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
References
https://github.com/xxg1413/docker-security/tree/master/CVE-2014-5278
https://groups.google.com/forum/#%21topic/docker-announce/lK6fQY6Jy84
https://groups.google.com/forum/message/raw?msg=docker-user/jyf9_mYcMI8/EIZfwe2QNzYJ
https://github.com/xxg1413/docker-security/tree/master/CVE-2014-5278
https://groups.google.com/forum/#%21topic/docker-announce/lK6fQY6Jy84
https://groups.google.com/forum/message/raw?msg=docker-user/jyf9_mYcMI8/EIZfwe2QNzYJ