ALT-PU-2015-1429-2 — docker-io

CVE-2015-3627

HIGH7.2

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.

Опубликовано: 2015-05-18Изменено: 2025-04-12

CVSS 2.0ВЫСОКАЯ 7.2

CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C

Ссылки

CVE-2015-3629

HIGH7.8

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

Опубликовано: 2015-05-18Изменено: 2025-04-12

CVSS 2.0ВЫСОКАЯ 7.2

CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS 3.xВЫСОКАЯ 7.8

CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ссылки

CVE-2015-3630

HIGH7.2

Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image.

Опубликовано: 2015-05-18Изменено: 2025-04-12

CVSS 2.0ВЫСОКАЯ 7.2

CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C

Ссылки

CVE-2015-3631

LOW3.6

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.

Опубликовано: 2015-05-18Изменено: 2025-04-12

CVSS 2.0НИЗКАЯ 3.6

CVSS:2.0/AV:L/AC:L/Au:N/C:N/I:P/A:P

Ссылки

GHSA-8fvr-5rqf-3wwh

HIGH8.4

Information Exposure in Docker Engine

Опубликовано: 2022-02-15Изменено: 2024-07-08

CVSS 3.xВЫСОКАЯ 8.4

CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Ссылки

GHSA-g44j-7vp3-68cv

HIGH8.4

Arbitrary File Write in Libcontainer

Опубликовано: 2022-02-15Изменено: 2024-02-02

CVSS 3.xВЫСОКАЯ 8.4

CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Ссылки

GHSA-g7v2-2qxx-wjrw

NONE

Symlink Attack in Libcontainer and Docker Engine

Опубликовано: 2022-02-15Изменено: 2021-05-20

Ссылки

GHSA-v4h8-794j-g8mm

MEDIUM5.1

Arbitrary File Override in Docker Engine

Опубликовано: 2022-02-15Изменено: 2024-07-08

CVSS 3.xСРЕДНЯЯ 5.1

CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Ссылки

Обновление пакета docker-io в ветке sisyphus

Закрытые проблемы (8)

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image.

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.

Information Exposure in Docker Engine

Arbitrary File Write in Libcontainer

Symlink Attack in Libcontainer and Docker Engine

Arbitrary File Override in Docker Engine