CVE-2014-6407
Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or
Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.
HIGH · CVSS 7.5
EPSS 0.05856
Schedule remediation
- EPSS percentile: top 9% of all CVEs by exploitation likelihood
- CVSS base score ≥ 7.0
Sigma rules1
YARA rules0