CVE-2014-5279

The Docker daemon managed by boot2docker 1.2 and earlier improperly enables unauthenticated TCP connections by default, which makes it easier for remote attackers to gain privileges or execute arbitrary code from children containers.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-02-06

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Boot2docker (Boot2docker)

References

• https://groups.google.com/forum/#%21msg/docker-announce/aQoVmQlcE0A/smPuBNYf8VwJ