CVE-2014-6407
Fixed in a distro release EPSS 5%
Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.
Products: docker
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/docker/docker | 1.3.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | docker-config-mirror-gcr | 0 |
| Chainguard | docker-dind | 0 |
| Debian 12 | docker.io | 1.3.2~dfsg1-1 |
| Debian 13 | docker.io | 1.3.2~dfsg1-1 |
| Debian 14 | docker.io | 1.3.2~dfsg1-1 |
| Red Hat rhel extras other 7 | docker | 0:1.3.2-4.el7 |
| SUSE Enterprise Storage 7.1 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 15 SP6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 15 SP7 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| Wolfi | docker-config-mirror-gcr | 0 |
| Wolfi | docker-dind | 0 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| openSUSE Tumbleweed | docker | 1.12.3-4.1 |
| openSUSE Tumbleweed | docker-stable | 24.0.9_ce-15.1 |