Skip to content

Access Restriction Bypass in Docker

Moderate severity GitHub Reviewed Published Feb 15, 2022 to the GitHub Advisory Database • Updated Jan 9, 2023

Package

gomod github.com/docker/docker (Go)

Affected versions

>= 1.3.0, < 1.3.2

Patched versions

1.3.2

Description

Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.

References

Reviewed May 20, 2021
Published to the GitHub Advisory Database Feb 15, 2022
Last updated Jan 9, 2023

Severity

Moderate

EPSS score

Exploit Prediction Scoring System (EPSS)

This score estimates the probability of this vulnerability being exploited within the next 30 days. Data provided by FIRST.
(78th percentile)

Weaknesses

CVE ID

CVE-2014-6408

GHSA ID

GHSA-44gg-pmqr-4669

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.