CVE-2015-3627

CVE-2015-3627 describes a symlink-based privilege escalation in Libcontainer and Docker Engine where a file-descriptor is opened before performing chroot, enabling a local attacker to gain elevated privileges via a crafted Dockerfile or image. IBM bulletin coverage confirms this vulnerability wit...

CVE-2015-3629

CVE-2015-3629 : Affects Libcontainer 1.6.0, as used in Docker Engine. If a container is respawned, an attacker can perform a symlink attack to escape the container and write to arbitrary files on the host via the mount namespace, enabling local container breakout and host impact. The issue is doc...