CVE-2014-8178: Docker Cs Engine

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands.

Affected products

• Docker Cs Engine: before 1.6.2-cs7 (fixed in 1.6.2-cs7)
• Docker Docker: before 1.8.3 (fixed in 1.8.3)
• Opensuse Opensuse: version 13.2 only

Published 2019-12-17. Last modified 2026-06-17.