CVE-2014-6407

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2014-6407
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-6407.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2014-6407
Aliases
Downstream
Related
Withdrawn
2026-01-27T04:13:17.526343Z
Published
2014-12-12T15:59:04Z
Modified
2026-07-17T21:00:36.456970192Z
Summary
[none]
Details

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.

References

Affected packages