CVE-2014-3499: Docker

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

Affected products

• Docker Docker: version 1.0.0 only
• Fedoraproject Fedora: version 19 only; version 20 only

Published 2014-07-11. Last modified 2026-06-17.