Unscored severity · published Dec 12, 2014
CVE-2014-6408
Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Docker · Docker
1.3.0; 1.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6408
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6408
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145154.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00009.html
secunia.com
http://secunia.com/advisories/60171
secunia.com
http://secunia.com/advisories/60241
www.openwall.com
http://www.openwall.com/lists/oss-security/2014/11/24/5
Vendor Advisory
https://docs.docker.com/v1.3/release-notes/
More from Docker
7.8
CVE-2019-15752
Docker Desktop Community Edition Privilege Escalation Vulnerability
9.8
CVE-2014-0048
An issue was found in Docker before 1.6.0
9.8
CVE-2019-14271
In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that…
8.8
CVE-2020-14300
The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053)…
8.8
CVE-2020-14298
The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which…