CVE catalog

CVE-2014-3499

docker.io: CVE-2014-3499

Severity: Low
Published: Jul 1, 2014, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.39% · Oct 25, 2026

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	docker.io	sid	`28.5.2+dfsg4-5`	not affected
Debian	docker.io	forky	`28.5.2+dfsg4-5`	not affected
Debian	docker.io	trixie	`26.1.5+dfsg1-9+deb13u1`	not affected
Debian	docker.io	trixie-security	`26.1.5+dfsg1-9+deb13u1`	not affected
Debian	docker.io	bookworm	`20.10.24+dfsg1-1+deb12u1`	not affected
Opensuse	docker-stable	tumbleweed	`24.0.9_ce-15.1`	fixed
Suse	docker-stable	linux enterprise module for containers 15 sp6	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise module for containers 15 sp7	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise high performance computing 15 sp3-ltss	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise high performance computing 15 sp4-espos	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise high performance computing 15 sp4-ltss	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise high performance computing 15 sp5-espos	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise high performance computing 15 sp5-ltss	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise server 15 sp3-ltss	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise server 15 sp4-ltss	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise server 15 sp5-ltss	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise server for sap applications 15 sp3	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise server for sap applications 15 sp4	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	linux enterprise server for sap applications 15 sp5	`24.0.9_ce-150000.1.25.1`	fixed
Suse	docker-stable	enterprise storage 7.1	`24.0.9_ce-150000.1.25.1`	fixed
Opensuse	docker-stable	leap 15.6	`24.0.9_ce-150000.1.25.1`	fixed
Opensuse	docker	tumbleweed	`1.12.3-4.1`	fixed
Suse	docker-stable	linux enterprise server 12 sp5-ltss	`24.0.9_ce-1.20.1`	fixed
Suse	docker-stable	linux enterprise server ltss extended security 12 sp5	`24.0.9_ce-1.20.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	docker.io	source	sid	`Not affected`	unimportant	Not reported	Not reported
Debian	docker.io	source	forky	`Not affected`	unimportant	Not reported	Not reported
Debian	docker.io	source	trixie	`Not affected`	unimportant	Not reported	Not reported
Debian	docker.io	source	bookworm	`Not affected`	unimportant	Not reported	Not reported
Opensuse	docker-stable	rpm	tumbleweed	`24.0.9_ce-15.1`	Not reported	OPENSUSE-SU-2025:15589-1	Not reported
Suse	docker-stable	rpm	linux enterprise module for containers 15 sp6	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise module for containers 15 sp7	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise high performance computing 15 sp3-ltss	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise high performance computing 15 sp4-espos	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise high performance computing 15 sp4-ltss	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise high performance computing 15 sp5-espos	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise high performance computing 15 sp5-ltss	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise server 15 sp3-ltss	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise server 15 sp4-ltss	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise server 15 sp5-ltss	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise server for sap applications 15 sp3	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise server for sap applications 15 sp4	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	linux enterprise server for sap applications 15 sp5	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Suse	docker-stable	rpm	enterprise storage 7.1	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Opensuse	docker-stable	rpm	leap 15.6	`24.0.9_ce-150000.1.25.1`	Not reported	SUSE-SU-2025:03545-1	Not reported
Opensuse	docker	rpm	tumbleweed	`1.12.3-4.1`	Not reported	OPENSUSE-SU-2024:10532-1	Not reported
Suse	docker-stable	rpm	linux enterprise server 12 sp5-ltss	`24.0.9_ce-1.20.1`	Not reported	SUSE-SU-2025:03540-1	Not reported
Suse	docker-stable	rpm	linux enterprise server ltss extended security 12 sp5	`24.0.9_ce-1.20.1`	Not reported	SUSE-SU-2025:03540-1	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[docker-doc]Unknown
Source package: [docker.io]
Details (2)
- 20.10.24+dfsg1-1+deb12u1 · all · bookworm
  Not affected
  dsa · docker.io · debian · bookworm
- 20.10.24+dfsg1-1+deb12u1 · all · bookworm
  Not affected
  dsa · docker.io · debian · bookworm
[docker.io]Unknown
Source package: [docker.io]
Details (2)
- 20.10.24+dfsg1-1+deb12u1+b6 · amd64 · bookworm
  Not affected
  dsa · docker.io · debian · bookworm
- 20.10.24+dfsg1-1+deb12u1+b6 · arm64 · bookworm
  Not affected
  dsa · docker.io · debian · bookworm
[golang-github-docker-docker-dev]Unknown
Source package: [docker.io]
Details (2)
- 20.10.24+dfsg1-1+deb12u1 · all · bookworm
  Not affected
  dsa · docker.io · debian · bookworm
- 20.10.24+dfsg1-1+deb12u1 · all · bookworm
  Not affected
  dsa · docker.io · debian · bookworm

[openSUSE Tumbleweed]

[docker]Unknown
Source package: [docker]
Details (1)
- 29.4.0_ce-40.3 · x86_64 · tumbleweed
  Fixed · Fixed: 1.12.3-4.1
  dsa · docker · opensuse · tumbleweed
[docker-bash-completion]Unknown
Source package: [docker]
Details (1)
- 29.4.0_ce-40.3 · noarch · tumbleweed
  Unknown · Fixed: 1.12.3-4.1
  Version impact unknown
  dsa · docker · opensuse · tumbleweed
[docker-buildx]Unknown
Source package: [docker]
Details (1)
- 0.33.0-40.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.12.3-4.1
  Version impact unknown
  dsa · docker · opensuse · tumbleweed
[docker-fish-completion]Unknown
Source package: [docker]
Details (1)
- 29.4.0_ce-40.3 · noarch · tumbleweed
  Unknown · Fixed: 1.12.3-4.1
  Version impact unknown
  dsa · docker · opensuse · tumbleweed
[docker-rootless-extras]Unknown
Source package: [docker]
Details (1)
- 29.4.0_ce-40.3 · noarch · tumbleweed
  Unknown · Fixed: 1.12.3-4.1
  Version impact unknown
  dsa · docker · opensuse · tumbleweed
[docker-stable]Unknown
Source package: [docker-stable]
Details (1)
- 24.0.9_ce-19.3 · x86_64 · tumbleweed
  Fixed · Fixed: 24.0.9_ce-15.1
  dsa · docker-stable · opensuse · tumbleweed
[docker-stable-bash-completion]Unknown
Source package: [docker-stable]
Details (1)
- 24.0.9_ce-19.3 · noarch · tumbleweed
  Unknown · Fixed: 24.0.9_ce-15.1
  Version impact unknown
  dsa · docker-stable · opensuse · tumbleweed
[docker-stable-buildx]Unknown
Source package: [docker-stable]
Details (1)
- 0.25.0-19.3 · x86_64 · tumbleweed
  Unknown · Fixed: 24.0.9_ce-15.1
  Version impact unknown
  dsa · docker-stable · opensuse · tumbleweed
[docker-stable-fish-completion]Unknown
Source package: [docker-stable]
Details (1)
- 24.0.9_ce-19.3 · noarch · tumbleweed
  Unknown · Fixed: 24.0.9_ce-15.1
  Version impact unknown
  dsa · docker-stable · opensuse · tumbleweed
[docker-stable-rootless-extras]Unknown
Source package: [docker-stable]
Details (1)
- 24.0.9_ce-19.3 · noarch · tumbleweed
  Unknown · Fixed: 24.0.9_ce-15.1
  Version impact unknown
  dsa · docker-stable · opensuse · tumbleweed
[docker-stable-zsh-completion]Unknown
Source package: [docker-stable]
Details (1)
- 24.0.9_ce-19.3 · noarch · tumbleweed
  Unknown · Fixed: 24.0.9_ce-15.1
  Version impact unknown
  dsa · docker-stable · opensuse · tumbleweed
[docker-zsh-completion]Unknown
Source package: [docker]
Details (1)
- 29.4.0_ce-40.3 · noarch · tumbleweed
  Unknown · Fixed: 1.12.3-4.1
  Version impact unknown
  dsa · docker · opensuse · tumbleweed

Observed: Oct 23, 2026, 5:10:38 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]