CVE-2014-5277

3 advisories.

Go/github.com/docker/docker CVE-2014-5277: medium 5.3, EPSS 1.87%

Man-in-the-Middle (MitM)

Action: Upgrade github.com/docker/docker to 1.3.1 or later.

go get github.com/docker/docker@v1.3.1

Affected

introduced	fixed	last affected
0	1.3.1	-

Fixed versions

1.3.1

Sources

CVE-2014-5277 · published 2022-02-15T01:57:18Z · modified 2026-09-10T03:49:11.718992039Z · JSON

Go/github.com/docker/docker CVE-2014-5277: unknown, EPSS 1.87%

Man-in-the-Middle (MitM) in github.com/docker/docker

Action: Upgrade github.com/docker/docker to 1.3.1 or later.

go get github.com/docker/docker@v1.3.1

Affected

introduced	fixed	last affected
0	1.3.1	-

Fixed versions

1.3.1

Sources

CVE-2014-5277 · published 2024-08-21T15:11:40Z · modified 2026-02-04T04:01:10.378799Z · JSON

PyPI/docker-py CVE-2014-5277: unknown, EPSS 1.87%

Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authe

Action: Upgrade docker-py to 0.5.3 or later.

pip install docker-py==0.5.3

Affected

introduced	fixed	last affected
0	0.5.3	-

Fixed versions

0.5.3

Sources

CVE-2014-5277 · published 2014-11-17T16:59:00Z · modified 2024-08-21T15:26:43.035056Z · JSON