UpHeron
All vulnerabilities

Servers and applications

CVE-2019-14271

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

Severity
Critical 9.8
Published
29 Jul 2019
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
19.03.1
Sources
NVD

Affected software

SoftwareAffected versions
Docker EngineServers and applications · cpe:a:docker:docker
  • From 19.03 before 19.03.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-14271
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-14271