Skip to content
OpenAdvisories
High RHBA-2015:1167 4 CVEs

Red Hat Bug Fix Advisory: docker bug fix update

Published Sep 13, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 atomic 0:0-0.40.gitf863afd.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker 0:1.6.2-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-logrotate 0:1.6.2-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-python 0:1.0.0-53.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-selinux 0:1.6.2-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 python-websocket-client 0:0.14.1-97.el7

Vulnerabilities 4

  • High 8.4
    CVE-2015-3629

    Arbitrary File Write in Libcontainer

    Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

    docker.io docker.io github.com/docker/docker Debian Ubuntu Go
  • High 8.4
    CVE-2015-3630

    Information Exposure in Docker Engine

    Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a cr…

    docker.io docker.io github.com/docker/docker Debian Ubuntu Go
  • Medium 5.1
    CVE-2015-3631

    Arbitrary File Override in Docker Engine

    Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.

    docker.io docker.io github.com/docker/docker Debian Ubuntu Go
  • Medium —
    CVE-2015-3627

    Symlink Attack in Libcontainer and Docker Engine

    Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.

    docker.io docker.io github.com/docker/docker Debian Ubuntu Go

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1209576
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1209625
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1214070
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1215667
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1215819
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1218639
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1222453
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1222784
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1225549
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1225556
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1225965
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1226320
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1226989
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1226990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1227040
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1228167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1228397
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1229374
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1231936
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_1167.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-3627
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1219061
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3627
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3627
  • report
    https://access.redhat.com/security/cve/CVE-2015-3629
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1219058
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3629
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3629
  • report
    https://access.redhat.com/security/cve/CVE-2015-3630
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1219063
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3630
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3630
  • report
    https://access.redhat.com/security/cve/CVE-2015-3631
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1219065
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3631
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3631