GitHub Advisoryadvisory · Go

GHSA-g44j-7vp3-68cv Arbitrary File Write in Libcontainer

HIGH Published 2022-02-15 Modified 2024-02-02 Official page ↗
Aliases
CVE-2015-3629
Ecosystem
Go
Packages
github.com/docker/docker
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-59
Reviewed
2021-05-19

Affected packages

• Go github.com/docker/docker: >= 1.6.0, < 1.6.1 → fixed in 1.6.1

Description

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

Related

Alias · CVE (1)

  • CVE-2015-3629 Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to… vulnerability

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References