[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fehzQIAfIUEF-oSk3GkamjoNoSL2m58J_tJd0bEPze54":3,"g5a-risk:CVE-2014-9357":111},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":28,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":40,"references":41,"referencesCount":54,"weaknesses":55,"weaknessesCount":40,"isActivelyExploited":30,"cisaInfo":28,"otxData":28,"relatedBlogPosts":59,"seoMetadata":60,"configurations":85,"relatedVendorCves":93,"notableEvents":94},"CVE-2014-9357","What is CVE-2014-9357?","Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.","Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) arc...","2014-12-16T18:59:15.95","2026-06-17T00:18:09.743",10,"AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":31},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":30,"ObtainAllPrivilege":30,"ObtainUserPrivilege":30,"ObtainOtherPrivilege":30,"UserInteractionRequired":30},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","COMPLETE","",null,"HIGH",false,[],0.06452,[32,32,32,32,32,32,32],"Critical",[36],{"vendor":37,"product":37,"version":38,"criteria":39,"vulnerable":4},"docker","1.3.2","cpe:2.3:a:docker:docker:1.3.2:*:*:*:*:*:*:*",1,[42,46,50,52],{"url":43,"source":44,"tags":45},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F534215\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":47,"source":48,"tags":49},"https:\u002F\u002Fgroups.google.com\u002Fforum\u002F#%21msg\u002Fdocker-user\u002FnFAz-B-n4Bw\u002F0wr3wvLsnUwJ","Google",[],{"url":43,"source":44,"tags":51},[],{"url":47,"source":48,"tags":53},[],4,[56],{"id":57,"name":57,"description":58},"Unknown","CWE-264",[],{"title":61,"metaDescription":62,"keywords":63,"canonicalUrl":64,"structuredData":65},"What is CVE-2014-9357? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2014-9357, a critical severity cyber security vulnerability from 2014. Docker 1.3.2 allows remote attackers to execute arbitrar...","CVE-2014-9357, CVE-2014-9357 vulnerability, CVE-2014-9357 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, docker security, docker vulnerability","\u002Fwhat-is\u002Fcve-2014-9357",{"@context":66,"@type":67,"headline":61,"description":62,"datePublished":10,"dateModified":11,"author":68,"publisher":72,"about":76,"mainEntityOfPage":80,"articleSection":83,"keywords":84},"https:\u002F\u002Fschema.org","TechArticle",{"@type":69,"name":70,"url":71},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":69,"name":70,"url":71,"logo":73},{"@type":74,"url":75},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":77,"name":6,"description":78,"additionalType":79},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":81,"@id":82},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2014-9357","Cybersecurity","CVE-2014-9357, CVE-2014-9357 vulnerability, CVE-2014-9357 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[86],{"Operator":28,"Negate":28,"Nodes":87},[88],{"Operator":89,"Negate":30,"CPEMatch":90},"OR",[91],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":92,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"4B6B6AB7-1ABB-4CD7-9C34-621263595589",[],[95,102],{"id":96,"eventType":97,"eventTime":98,"details":99,"label":100,"color":101},"e1f545ce-23f1-4f80-a5bd-8cbaaa8adbd6","LOW_EPSS_DELTA","2025-11-18T04:06:51.281479+00:00","Daily EPSS score decreased by 0.291 on 2023-12-30","EPSS Score Decreased","green",{"id":103,"eventType":104,"eventTime":105,"details":106,"label":107,"color":108},"92bddc94-393d-4106-b30b-29a2a2bbc1f6","HIGH_EPSS_DELTA","2026-04-01T14:23:19.274063+00:00","Daily EPSS score increased by 0.157 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":110,"version":22},1793199188540,{"score":112,"band":113,"action":114,"scoredAt":115},54,"Medium","Plan remediation","2026-07-01T10:19:17.071543+00:00"]