Launchpad.net

CVE 2014-5282

Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'.

See the CVE page on Mitre.org for more details.