CVE-2014-6407

Опубликовано: 12 дек. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*

Версия до 1.3.1 (включая)

cpe:2.3:a:docker:docker:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:docker:docker:1.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.04909

Низкий

7.5 High

CVSS2

Дефекты

CWE-59

Связанные уязвимости

CVE-2014-6407

ubuntu

почти 12 лет назад

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.

CVE-2014-6407

redhat

почти 12 лет назад

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.

CVE-2014-6407

msrc

около 5 лет назад

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.

CVE-2014-6407

debian

почти 12 лет назад

Docker before 1.3.2 allows remote attackers to write to arbitrary file ...

GHSA-5qgp-p5jc-w2rm

CVSS3: 7.3

github

больше 4 лет назад

Arbitrary Code Execution in Docker

EPSS

Процентиль: 92%

0.04909

Низкий

7.5 High

CVSS2

Дефекты

CWE-59