Access Restriction Bypass in Docker
Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-6408US | medium5.0 | — | ||
Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options… | ||||
02
references
External citations — patches, advisories, analysis.
- https://docs.docker.com/v1.3/release-notesWEB
- https://github.com/docker/docker/commit/c9379eb3fbbc484c056f5a5e49d8d0b755a29c45WEB
- https://lists.fedoraproject.org/pipermail/package-announce/2014-December/145154.htmlWEB
- https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00009.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2014-6408ADVISORY
- https://secunia.com/advisories/60171WEB
- https://secunia.com/advisories/60241WEB
- https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6408WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan