CVE-2014-8179

CVE-2014-8179 affects Docker Engine prior to 1.8.3 and CS Docker Engine prior to 1.6.2-CS7. The vulnerability arises from improper validation and extraction of the manifest object from a JSON representation during a pull, enabling an attacker to inject new attributes into a JSON object and bypass...