CVE-2015-3629

CVE-2015-3629 : Affects Libcontainer 1.6.0, as used in Docker Engine. If a container is respawned, an attacker can perform a symlink attack to escape the container and write to arbitrary files on the host via the mount namespace, enabling local container breakout and host impact. The issue is doc...

CVE-2015-3630

Docker Engine before 1.6.1 uses weak permissions for 1 /proc/asound, 2 /proc/timerstats, 3 /proc/latencystats, and 4 /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image...

CVE-2015-3629

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization "mount namespace breakout" and write to arbitrary file on the host system via a symlink attack in an image when respawning a container...

CVE-2015-3627: Improper Link Resolution Before File Access

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image...

CVE-2015-3631: Undefined Security Weakness

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules LSM and dockert policies via an image that allows volumes to override files in /proc...

CVE-2015-3630: Undefined Security Weakness

Docker Engine before 1.6.1 uses weak permissions for 1 /proc/asound, 2 /proc/timerstats, 3 /proc/latencystats, and 4 /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image...

CVE-2015-3629: Improper Link Resolution Before File Access

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization "mount namespace breakout" and write to arbitrary file on the host system via a symlink attack in an image when respawning a container...

PT-2015-6251

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 1.6.1 Description The issue allows local users to set arbitrary Linux Security Modules LSM and docker t policies via an image that allows volumes to override files in /proc. This can be achieved by exploiting th...

PT-2015-6250

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 1.6.1 Description The issue allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image. This is due to weak permissions for certain /proc file...

PT-2015-6247

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 1.6.1 Libcontainer versions prior to 1.6.1 Description The issue allows local users to gain privileges via a symlink attack in an image. This occurs because Libcontainer and Docker Engine open the file-descripto...

PT-2015-6249

Name of the Vulnerable Software and Affected Versions Docker Engine using Libcontainer version 1.6.0 Description The issue allows local users to escape containerization and write to arbitrary files on the host system via a symlink attack in an image when respawning a container. This is due to a...

[SECURITY] Fedora 20 Update: docker-io-1.4.1-6.fc20

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...

[SECURITY] Fedora 21 Update: docker-io-1.4.0-1.fc21

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...

[SECURITY] Fedora 21 Update: docker-io-1.3.2-2.fc21

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...

[SECURITY] Fedora 20 Update: docker-io-1.0.0-6.fc20

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...