Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2015-3627
Description:Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-3627
http://seclists.org/fulldisclosure/2015/May/28
http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html
SuSE Security Announcement: openSUSE-SU-2015:0905 (Google Search)
http://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html




© 1998-2025 E-Soft Inc. All rights reserved.