Lucene search
HistoryDec 12, 2014 - 3:59 p.m.
CVE-2014-6408
cve-2014-6408
docker
nvd
security
container
image
remote attack
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
8 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.1%
Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.
Affected configurations
Node
dockerdockerMatch1.3.0
ORdockerdockerMatch1.3.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| docker:docker | docker | eq | 1.3.0 |
| docker:docker | docker | eq | 1.3.1 |
Related
prion
prion
Design/Logic Flaw
2014-12-12 15:59:00
openvas
openvas
Docker 1.3.x < 1.3.2 Container Escalation Vulnerability
2021-09-08 00:00:00
Fedora Update for docker-io FEDORA-2014-15779
2015-01-05 00:00:00
openSUSE: Security Advisory for docker (openSUSE-SU-2014:1596-1)
2015-09-18 00:00:00
ubuntucve
ubuntucve
CVE-2014-6408
2014-12-12 00:00:00
cvelist
cvelist
CVE-2014-6408
2014-12-12 15:00:00
github
github
Access Restriction Bypass in Docker
2022-02-15 01:57:18
osv
osv
Access Restriction Bypass in Docker
2022-02-15 01:57:18
nvd
nvd
CVE-2014-6408
2014-12-12 15:59:06
veracode
veracode
Container Bypass
2017-05-03 08:59:15
debiancve
debiancve
CVE-2014-6408
2014-12-12 15:59:06
suse
suse
Security update for docker (important)
2014-12-08 17:07:52
oraclelinux
oraclelinux
docker security and bug fix update
2014-12-05 00:00:00
nessus
nessus
Fedora 21 : docker-io-1.3.2-2.fc21 (2014-15779)
2014-12-04 00:00:00
Amazon Linux AMI : docker (ALAS-2014-454)
2014-11-26 00:00:00
openSUSE Security Update : docker (openSUSE-SU-2014:1596-1)
2014-12-09 00:00:00
amazon
amazon
Critical: docker
2014-11-25 12:22:00
fedora
fedora
[SECURITY] Fedora 21 Update: docker-io-1.3.2-2.fc21
2014-12-03 17:16:16
[SECURITY] Fedora 20 Update: docker-io-1.4.1-6.fc20
2015-01-26 02:35:37
securityvulns
securityvulns
Docker 1.3.2 - Security Advisory [24 Nov 2014]
2014-12-01 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
8 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.1%
Related for CVE-2014-6408