Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2017-14992

Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing.

  • Published: Nov 1, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-14992
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
docker / docker - 1.10.3.x
docker / docker 1.12.6-0 1.12.6-0.x
docker / docker 17.03.0 17.03.0.x
docker / docker 17.03.1 17.03.1.x
docker / docker 17.03.2 17.03.2.x
docker / docker 17.06.0 17.06.0.x
docker / docker 17.06.1 17.06.1.x
docker / docker 17.06.2 17.06.2.x
docker / docker 17.09.0 17.09.0.x