[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fehzQIAfIUEF-oSk3GkamjoNoSL2m58J_tJd0bEPze54":3,"g5a-risk:CVE-2014-9357":107},{"success":4,"data":5,"meta":105},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":27,"epssPercentile":15,"epssTimeSeries":28,"severity":29,"affectedProducts":30,"affectedProductsCount":35,"references":36,"referencesCount":49,"weaknesses":50,"weaknessesCount":35,"isActivelyExploited":54,"cisaInfo":15,"otxData":15,"relatedBlogPosts":55,"seoMetadata":56,"configurations":81,"relatedVendorCves":89,"notableEvents":90},"CVE-2014-9357","What is CVE-2014-9357?","Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.","Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) arc...","2014-12-16T18:59:15.95","2025-04-12T10:46:40.837",10,"AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","COMPLETE","HIGH",0.06202,[27,27,27,27,27,27,27],"Critical",[31],{"vendor":32,"product":32,"version":33,"criteria":34,"vulnerable":4},"docker","1.3.2","cpe:2.3:a:docker:docker:1.3.2:*:*:*:*:*:*:*",1,[37,41,45,47],{"url":38,"source":39,"tags":40},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F534215\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":42,"source":43,"tags":44},"https:\u002F\u002Fgroups.google.com\u002Fforum\u002F#%21msg\u002Fdocker-user\u002FnFAz-B-n4Bw\u002F0wr3wvLsnUwJ","Google",[],{"url":38,"source":39,"tags":46},[],{"url":42,"source":43,"tags":48},[],4,[51],{"id":52,"name":52,"description":53},"Unknown","CWE-264",false,[],{"title":57,"metaDescription":58,"keywords":59,"canonicalUrl":60,"structuredData":61},"What is CVE-2014-9357? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-9357, a critical severity cyber security vulnerability from 2014. Docker 1.3.2 allows remote attackers to execute arbitrar...","CVE-2014-9357, CVE-2014-9357 vulnerability, CVE-2014-9357 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, docker security, docker vulnerability","\u002Fwhat-is\u002Fcve-2014-9357",{"@context":62,"@type":63,"headline":57,"description":58,"datePublished":10,"dateModified":11,"author":64,"publisher":68,"about":72,"mainEntityOfPage":76,"articleSection":79,"keywords":80},"https:\u002F\u002Fschema.org","TechArticle",{"@type":65,"name":66,"url":67},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":65,"name":66,"url":67,"logo":69},{"@type":70,"url":71},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":73,"name":6,"description":74,"additionalType":75},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":77,"@id":78},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-9357","Cybersecurity","CVE-2014-9357, CVE-2014-9357 vulnerability, CVE-2014-9357 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[82],{"Operator":15,"Negate":15,"Nodes":83},[84],{"Operator":85,"Negate":15,"CPEMatch":86},"OR",[87],{"Vulnerable":4,"Criteria":34,"MatchCriteriaID":88,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4B6B6AB7-1ABB-4CD7-9C34-621263595589",[],[91,98],{"id":92,"eventType":93,"eventTime":94,"details":95,"label":96,"color":97},"e1f545ce-23f1-4f80-a5bd-8cbaaa8adbd6","LOW_EPSS_DELTA","2025-11-18T04:06:51.281479+00:00","Daily EPSS score decreased by 0.291 on 2023-12-30","EPSS Score Decreased","green",{"id":99,"eventType":100,"eventTime":101,"details":102,"label":103,"color":104},"92bddc94-393d-4106-b30b-29a2a2bbc1f6","HIGH_EPSS_DELTA","2026-04-01T14:23:19.274063+00:00","Daily EPSS score increased by 0.157 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":106,"version":21},1792364584199,{"score":108,"band":109,"action":110,"scoredAt":111},55,"Medium","Plan remediation","2026-10-17T07:35:03.417831+00:00"]