Fluid Attacks Database

Description

Access Restriction Bypass in Docker Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
go	github.com/docker/docker	>=1.3.0 <1.3.2	1.3.2
debian 14	docker.io	>=0 <1.3.2~dfsg1-1	1.3.2~dfsg1-1
debian 13	docker.io	>=0 <1.3.2~dfsg1-1	1.3.2~dfsg1-1
debian 11	docker.io	>=0 <1.3.2~dfsg1-1	1.3.2~dfsg1-1
debian 12	docker.io	>=0 <1.3.2~dfsg1-1	1.3.2~dfsg1-1

Aliases

1. CVE-2014-64082. NVD-2014-64083. OSV-2014-64084. OSV-DEBIAN-2014-64085. GCVE-2014-64086. SECURITY-TRACKER-CVE-2014-6408

References

1. https://github.com/docker/docker/commit/c9379eb3fbbc484c056f5a5e49d8d0b755a29c452. https://docs.docker.com/v1.3/release-notes3. https://lists.fedoraproject.org/pipermail/package-announce/2014-December/145154.html4. https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00009.html5. https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-64086. https://www.openwall.com/lists/oss-security/2014/11/24/5

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.