Archive

18 May 2015

Vulnerabilities first published on this day (UTC), newest first.

← April 2015 2015 / May /18 June 2015 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.1

CVE-2015-3631

Arbitrary File Override in Docker Engine

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.

docker.io docker.io github.com/docker/docker Debian Ubuntu Go

May 18, 2015
Medium —

CVE-2015-3627

Symlink Attack in Libcontainer and Docker Engine

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.

docker.io docker.io github.com/docker/docker Debian Ubuntu Go

May 18, 2015