CVE-2014-6408

Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.

This issue did not affect the version of Docker as shipped with Red Hat Enterprise Linux 7.

The next current release of Docker is < 1.30 and the next release will be based off of 1.3.2 or greater.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.