CVE-2014-8179: Improper Input Validation

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation...

PT-2019-7142

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 1.8.3 CS Docker Engine versions prior to 1.6.2-CS7 Description The issue arises from improper validation and extraction of the manifest object from its JSON representation during a pull. This allows attackers to...