ID de Prueba:	1.3.6.1.4.1.25623.1.0.120062
Categoría:	Amazon Linux Local Security Checks
Título:	Amazon Linux: Security Advisory (ALAS-2015-522)
Resumen:	The remote host is missing an update for the 'docker' package(s) announced via the ALAS-2015-522 advisory.
Descripción:	Summary: The remote host is missing an update for the 'docker' package(s) announced via the ALAS-2015-522 advisory. Vulnerability Insight: The file-descriptor passed by libcontainer to the pid-1 process of a container has been found to be opened prior to performing the chroot, allowing insecure open and symlink traversal. This allows malicious container images to trigger a local privilege escalation. (CVE-2015-3627) Libcontainer version 1.6.0 introduced changes which facilitated a mount namespace breakout upon respawn of a container. This allowed malicious images to write files to the host system and escape containerization. (CVE-2015-3629) Several paths underneath /proc were writable from containers, allowing global system manipulation and configuration. These paths included /proc/asound, /proc/timer_stats, /proc/latency_stats, and /proc/fs. By allowing writes to /proc/fs, it has been noted that CIFS volumes could be forced into a protocol downgrade attack by a root user operating inside of a container. Machines having loaded the timer_stats module were vulnerable to having this mechanism enabled and consumed by a container. (CVE-2015-3630) By allowing volumes to override files of /proc within a mount namespace, a user could specify arbitrary policies for Linux Security Modules, including setting an unconfined policy underneath AppArmor, or a docker_t policy for processes managed by SELinux. In all versions of Docker up until 1.6.1, it is possible for malicious images to configure volume mounts such that files of proc may be overridden. (CVE-2015-3631) Affected Software/OS: 'docker' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3627 http://seclists.org/fulldisclosure/2015/May/28 http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html SuSE Security Announcement: openSUSE-SU-2015:0905 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html Common Vulnerability Exposure (CVE) ID: CVE-2015-3629 BugTraq ID: 74558 http://www.securityfocus.com/bid/74558 Common Vulnerability Exposure (CVE) ID: CVE-2015-3630 BugTraq ID: 74566 http://www.securityfocus.com/bid/74566 Common Vulnerability Exposure (CVE) ID: CVE-2015-3631
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.