Withdrawn by the publisher.

Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

Affected: Go: github.com/docker/docker

Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

docker-1.12.3-4.1 on GA media

docker: symbolic and hardlink issues leading to privilege escalation docker: Path traversal and spoofing opportunities presented through image identifiers

Security update for docker-stable

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: docker.io

Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."