CVE-2019-14271

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

• CWE-665

• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.htmlMailing List, Third Party Advisory
• https://docs.docker.com/engine/release-notes/Release Notes, Third Party Advisory
• https://github.com/moby/moby/issues/39449Third Party Advisory
• https://seclists.org/bugtraq/2019/Sep/21Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190828-0003/Third Party Advisory
• https://www.debian.org/security/2019/dsa-4521Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.htmlMailing List, Third Party Advisory
• https://docs.docker.com/engine/release-notes/Release Notes, Third Party Advisory
• https://github.com/moby/moby/issues/39449Third Party Advisory
• https://seclists.org/bugtraq/2019/Sep/21Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190828-0003/Third Party Advisory
• https://www.debian.org/security/2019/dsa-4521Third Party Advisory

Published

Jul 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14262MetadataExtractor 2.1.0 allows stack consumption.
• CVE-2019-14266OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/uce…
• CVE-2019-14267PDFResurrect 0.15 has a buffer overflow via a crafted PDF fi…7.8
• CVE-2019-14268In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web re…
• CVE-2019-1427A remote code execution vulnerability exists in the way that…7.5
• CVE-2019-14270Comodo Antivirus through 12.0.0.6870, Comodo Firewall throug…
• CVE-2019-14272In SilverStripe asset-admin 4.0, there is XSS in file titles…5.4
• CVE-2019-14273In SilverStripe assets 4.0, there is broken access control o…5.3
• CVE-2019-14274MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() …5.5
• CVE-2019-14275Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the…5.5
• CVE-2019-14276WUSTL XNAT 1.7.5.3 allows XXE attacks via a POST request bod…6.5
• CVE-2019-14277Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 wi…9.8