CVE-2014-6408

Published: Dec 12, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.

Affected (2)

Products: Docker: Docker

Docker

1 product

Docker

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Docker Docker	Version 1.3.0
Docker Docker	Version 1.3.1

Related CWEs

CWE-264

References (12)

http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145154.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00009.html

Source: cve@mitre.org

http://secunia.com/advisories/60171

Source: cve@mitre.org

http://secunia.com/advisories/60241

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/11/24/5

Source: cve@mitre.org

https://docs.docker.com/v1.3/release-notes/

Source: cve@mitre.org

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145154.html