Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2015-3627

docker: insecure opening of file-descriptor 1 leading to privilege escalation

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Docker Redhat
Products
Docker Libcontainer Rhel Extras Other
CVE-2015-3629

docker: symlink traversal on container respawn allows local privilege escalation

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Docker Opensuse Redhat
Products
Libcontainer Opensuse Rhel Extras Other