CVE-2014-9356

Name of the Vulnerable Software and Affected Versions Docker versions prior to 1.3.3

Description The issue allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an image or build in a Dockerfile. This is achieved by exploiting a path traversal vulnerability.

Recommendations For Docker versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of symlinks in images and builds to minimize the risk of exploitation.