CVE-2014-6407

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image…

published December 12, 2014

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04909 · 92.1th percentile
Published
2014-12-12T15:00Z
EPSS history
Timeline
  • 12 DEC 15:00Z
    Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image…
    cvelistv5