Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2015-05-18T15:00:00
Updated: 2016-12-30T15:57:01
Reserved: 2015-04-30T00:00:00
Link: CVE-2015-3627
JSON object: View
NVD Information
Status : Modified
Published: 2015-05-18T15:59:14.930
Modified: 2023-11-07T02:25:39.687
Link: CVE-2015-3627
JSON object: View
Redhat Information
No data.
CWE