CVE-2014-3499: Privilege Escalation in Docker
Summary
CVE-2014-3499: Privilege Escalation in Docker. Affects github.com/docker/docker versions < 1.0.1. Fixed in 1.0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Docker is a popular containerization platform written in Go. It allows users to package applications and their dependencies into lightweight, portable containers. Docker provides a management socket that is used for controlling and monitoring Docker daemon. However, in Docker version 1.0.0, the management socket has world-readable and world-writable permissions, which can be exploited by local users to gain elevated privileges.
Vulnerability Detail
The vulnerability (CVE-2014-3499) in Docker version 1.0.0 arises from the insecure permissions set on the management socket. This allows local users to gain unauthorized access and execute privileged actions on the Docker daemon. The exact vectors of exploitation are unspecified. The impact of this vulnerability can be severe, as it enables attackers to escalate their privileges and potentially compromise the entire Docker environment. The vulnerability has a CVSSv3 score of 8.4, indicating a high severity level.
How To Fix
Latest published version: v28.5.2+incompatible as of 22 Oct 2026
go get github.com/docker/docker@v28.5.2+incompatibleUpgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.0.1
This is the first release that contains the fix.
go get github.com/docker/docker@v1.0.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually modify the permissions of the management socket to restrict access. This can be achieved by setting appropriate file permissions using the 'chmod' command. For example, the following command can be used to restrict access to the socket:
chmod 660 /var/run/docker.sock
Conclusion
In conclusion, the vulnerability (CVE-2014-3499) in Docker version 1.0.0 allows local users to gain privileged access through the insecure permissions on the management socket. It is crucial to upgrade Docker to version 1.0.1 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for github.com/docker/docker →
FAQ
Docker is a containerization platform that allows users to package applications and their dependencies into lightweight, portable containers.
The vulnerability allows local users to gain elevated privileges and potentially compromise the Docker environment.
To fix this vulnerability, upgrade Docker to version 1.0.1 or later.
Yes, you can manually modify the permissions of the management socket to restrict access.
The CVSSv3 score of this vulnerability is 8.4, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for github.com/docker/docker.
