CVE-2015-3631

Published: May 18, 2015Modified: May 6, 2026

3.6

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.

Affected (1)

Products: Docker: Docker

Docker

1 product

Docker

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Docker Docker	Up to 1.6

Related CWEs

CWE-264

References (8)

http://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html

Source: cve@mitre.org

http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2015/May/28

Source: cve@mitre.org

https://groups.google.com/forum/#%21searchin/docker-user/1.6.1/docker-user/47GZrihtr-4/nwgeOOFLexIJ

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2015/May/28

Source: af854a3a-2127-422b-91ae-364da2661108

https://groups.google.com/forum/#%21searchin/docker-user/1.6.1/docker-user/47GZrihtr-4/nwgeOOFLexIJ

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.