CVE-2015-3629

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization "mount namespace breakout" and write to arbitrary file on the host system via a symlink attack in an image when respawning a container...

CVE-2015-3627

CVE-2015-3627 describes a symlink-based privilege escalation in Libcontainer and Docker Engine where a file-descriptor is opened before performing chroot, enabling a local attacker to gain elevated privileges via a crafted Dockerfile or image. IBM bulletin coverage confirms this vulnerability wit...

CVE-2015-3627

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image...

CVE-2015-3629

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization "mount namespace breakout" and write to arbitrary file on the host system via a symlink attack in an image when respawning a container...

CVE-2015-3629

CVE-2015-3629 : Affects Libcontainer 1.6.0, as used in Docker Engine. If a container is respawned, an attacker can perform a symlink attack to escape the container and write to arbitrary files on the host via the mount namespace, enabling local container breakout and host impact. The issue is doc...

CVE-2015-3627: Improper Link Resolution Before File Access

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image...

CVE-2015-3629: Improper Link Resolution Before File Access

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization "mount namespace breakout" and write to arbitrary file on the host system via a symlink attack in an image when respawning a container...

PT-2015-6247

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 1.6.1 Libcontainer versions prior to 1.6.1 Description The issue allows local users to gain privileges via a symlink attack in an image. This occurs because Libcontainer and Docker Engine open the file-descripto...

Amazon Linux AMI : docker (ALAS-2015-522)

The file-descriptor passed by libcontainer to the pid-1 process of a container has been found to be opened prior to performing the chroot, allowing insecure open and symlink traversal. This allows malicious container images to trigger a local privilege escalation. CVE-2015-3627 Libcontainer versi...

PT-2015-6249

Name of the Vulnerable Software and Affected Versions Docker Engine using Libcontainer version 1.6.0 Description The issue allows local users to escape containerization and write to arbitrary files on the host system via a symlink attack in an image when respawning a container. This is due to a...