Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-6407
7.5
HIGHCVSS v2
Published
December 12, 2014
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.
NPM
docker
RubyGemsProvides an OOP interface to docker's command-line interface without relying on its HTTP API.
RubyGemsProvides an OOP interface to docker's command-line interface without relying on its HTTP API.= 1.3.0, <= 1.3.1, = 1.0.0NVD
jbt/docker
GitHub
