CVE-2014-5279 describes a critical vulnerability in boot2docker versions 1.2 and earlier, where the Docker daemon improperly allows unauthenticated TCP connections by default. This misconfiguration enables remote attackers to achieve privilege escalation or execute arbitrary code from child containers. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its network-based attack vector and high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the inherent risk remains high for unpatched systems.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.2CPE matchmatch criteria | cpe:2.3:o:boot2docker:boot2docker:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.