{"id":"CVE-2014-6407","aliases":["GHSA-5qgp-p5jc-w2rm","GO-2022-0630"],"title":"Arbitrary Code Execution in Docker","summary":"Arbitrary Code Execution in Docker","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","vendor":"docker","product":"github.com/docker/docker","ecosystem":"go","affected":["github.com/docker/docker < 1.3.2"],"patched":["github.com/docker/docker 1.3.2"],"published":"2022-02-15","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:49:16.875720177Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-5qgp-p5jc-w2rm","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6407"},{"url":"https://github.com/docker/docker/commit/3ac6394b8082d4700483d52fbfe54914be537d9e"},{"url":"https://docs.docker.com/v1.3/release-notes"},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-December/145154.html"},{"url":"https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00009.html"},{"url":"https://secunia.com/advisories/60171"},{"url":"https://secunia.com/advisories/60241"},{"url":"https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6407"},{"url":"https://www.openwall.com/lists/oss-security/2014/11/24/5"}],"tags":["osv","go"],"epss":0.04909,"epssPercentile":0.91729,"ingestedAt":"2026-09-12T03:13:01.756Z","slug":"CVE-2014-6407","body":"## Overview\n\nDocker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.\n\n## Affected packages\n\n- `github.com/docker/docker < 1.3.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `github.com/docker/docker 1.3.2`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":40.2,"likelihood":1,"exploitation":0,"ransomware":0},"changes":[{"seq":208647,"id":"CVE-2014-6407","ts":1790016657183,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208643,"id":"CVE-2014-6407","ts":1790014843586,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208604,"id":"CVE-2014-6407","ts":1790012992787,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208600,"id":"CVE-2014-6407","ts":1790011241333,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208576,"id":"CVE-2014-6407","ts":1790009347311,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208572,"id":"CVE-2014-6407","ts":1790009337463,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208553,"id":"CVE-2014-6407","ts":1790009012027,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208537,"id":"CVE-2014-6407","ts":1790008113920,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208518,"id":"CVE-2014-6407","ts":1790007672168,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208513,"id":"CVE-2014-6407","ts":1790007517115,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208507,"id":"CVE-2014-6407","ts":1790007099189,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208440,"id":"CVE-2014-6407","ts":1790005428875,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208434,"id":"CVE-2014-6407","ts":1790004878137,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208429,"id":"CVE-2014-6407","ts":1790004720676,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208422,"id":"CVE-2014-6407","ts":1790003963041,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208402,"id":"CVE-2014-6407","ts":1790001536001,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208398,"id":"CVE-2014-6407","ts":1790000749552,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208351,"id":"CVE-2014-6407","ts":1789997842558,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208347,"id":"CVE-2014-6407","ts":1789997145805,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208341,"id":"CVE-2014-6407","ts":1789994195034,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208337,"id":"CVE-2014-6407","ts":1789993539192,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208328,"id":"CVE-2014-6407","ts":1789990554150,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208324,"id":"CVE-2014-6407","ts":1789989936236,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208318,"id":"CVE-2014-6407","ts":1789986915214,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208314,"id":"CVE-2014-6407","ts":1789986333170,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208310,"id":"CVE-2014-6407","ts":1789983276911,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208306,"id":"CVE-2014-6407","ts":1789982730117,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208302,"id":"CVE-2014-6407","ts":1789979638084,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208298,"id":"CVE-2014-6407","ts":1789979126347,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208294,"id":"CVE-2014-6407","ts":1789975998637,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208290,"id":"CVE-2014-6407","ts":1789975522525,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208286,"id":"CVE-2014-6407","ts":1789972356813,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208282,"id":"CVE-2014-6407","ts":1789971912756,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208278,"id":"CVE-2014-6407","ts":1789968719678,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208274,"id":"CVE-2014-6407","ts":1789968309756,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208270,"id":"CVE-2014-6407","ts":1789965082900,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208266,"id":"CVE-2014-6407","ts":1789964706737,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208262,"id":"CVE-2014-6407","ts":1789961444750,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208258,"id":"CVE-2014-6407","ts":1789961103564,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208254,"id":"CVE-2014-6407","ts":1789957807396,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208250,"id":"CVE-2014-6407","ts":1789957500200,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208246,"id":"CVE-2014-6407","ts":1789954169362,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208242,"id":"CVE-2014-6407","ts":1789953896895,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208238,"id":"CVE-2014-6407","ts":1789950527154,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208234,"id":"CVE-2014-6407","ts":1789950292288,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208230,"id":"CVE-2014-6407","ts":1789946889282,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208226,"id":"CVE-2014-6407","ts":1789946689330,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208222,"id":"CVE-2014-6407","ts":1789943252980,"field":"cvss","old":"7.3","new":"7.5"},{"seq":208218,"id":"CVE-2014-6407","ts":1789943086318,"field":"cvss","old":"7.5","new":"7.3"},{"seq":208214,"id":"CVE-2014-6407","ts":1789939615519,"field":"cvss","old":"7.3","new":"7.5"}]}