products / docker_engine
Docker Engine
Docker Engine is the container platform daemon and client. NVD tracks it as docker:docker. Low-level container escape CVEs are attributed to runc (linuxfoundation:runc) rather than this product.
api usage
Querying Docker Engine
product slug
docker_engineversion format
19.03.0, 20.10.0bash
curl "https://api.attestd.io/v1/check?product=docker_engine&version=19.03.0" \
-H "Authorization: Bearer $ATTESTD_KEY"Docker Engine 19.03.0 is affected by CVE-2020-27534 (path traversal information disclosure via archive handling) and CVE-2019-14271 (glibc nsswitch code injection during docker cp). The response shows risk_state: "high".
json
{
"product": "docker_engine",
"version": "19.03.0",
"supported": true,
"risk_state": "critical",
"risk_factors": [
"remote_code_execution",
"no_authentication_required",
"internet_exposed_service",
"patch_available"
],
"actively_exploited": false,
"remote_exploitable": true,
"authentication_required": false,
"patch_available": true,
"fixed_version": null,
"confidence": 0.5,
"cve_ids": [
"CVE-2019-14271",
"CVE-2019-16884",
"CVE-2020-27534",
"CVE-2021-21284",
"CVE-2021-21285",
"CVE-2024-41110",
"CVE-2026-64824",
"CVE-2026-73519"
],
"cves": null,
"max_epss": 0.18828,
"last_updated": "2026-08-16T05:52:22.797671Z",
"supply_chain": null,
"supply_chain_monitored": false,
"typosquat": null
}safe version
Docker Engine 20.10.0 is outside the affected ranges for CVE-2019-14271, CVE-2019-5736, CVE-2019-13139, and CVE-2018-15664 listed below.
bash
curl "https://api.attestd.io/v1/check?product=docker_engine&version=20.10.0" \
-H "Authorization: Bearer $ATTESTD_KEY"notable cves
CVE history
Docker Engine CVEs cluster around host filesystem access during docker cp and build, authorization bypass on the daemon API, and container escape paths that reach the host through the runtime stack.
| CVE | Description | Affects | CVSS |
|---|---|---|---|
CVE-2019-14271 | glibc nsswitch code injection during docker cp on 19.03.x enables remote code execution. | ≥19.03 <19.03.1 | 9.8 |
CVE-2019-5736 | Overwriting the host runc binary from a container yields host root. | Docker <18.09.2 | 8.6 |
CVE-2019-13139 | Manipulated docker build path executes arbitrary commands. | <18.09.4 | 8.4 |
CVE-2018-15664 | Symlink race on docker cp API paths reads or writes host files. | through 18.06.1-ce-rc2 | 7.5 |
CVE-2020-27534 | Path traversal in archive handling discloses files outside the intended context. | Engine 19.x | 5.3 |
related