Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2014-6408

Good to know:

icon

Date: December 12, 2014

Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.

Language: Go

Severity Score

Related Resources (17)

https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00009.html
https://docs.docker.com/v1.3/release-notes/
https://www.openwall.com/lists/oss-security/2014/11/24/5
https://lists.fedoraproject.org/pipermail/package-announce/2014-December/145154.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145154.html
https://nvd.nist.gov/vuln/detail/CVE-2014-6408
https://github.com/advisories/GHSA-44gg-pmqr-4669
https://docs.docker.com/v1.3/release-notes
http://www.openwall.com/lists/oss-security/2014/11/24/5
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6408
http://secunia.com/advisories/60171
https://secunia.com/advisories/60171
http://secunia.com/advisories/60241
https://github.com/docker/docker/commit/c9379eb3fbbc484c056f5a5e49d8d0b755a29c45
https://secunia.com/advisories/60241
https://www.mend.io/vulnerability-database/CVE-2014-6408

Severity Score

Weakness Type (CWE)

Improper Authorization

CWE-285

Permissions, Privileges, and Access Control

CWE-264

Top Fix

icon

Upgrade Version

Upgrade to version 1.3.2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): HIGH
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): HIGH
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us