p PatchFirst

CVE-2015-3629

CVE-2015-3629

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

CVSS 7.8 · High · EPSS 0.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • docker.io Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.6.1+dfsg1-1

    Update to 1.6.1+dfsg1-1

  • docker.io Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.6.1+dfsg1-1

    Update to 1.6.1+dfsg1-1

  • docker.io Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.6.1+dfsg1-1

    Update to 1.6.1+dfsg1-1

  • docker.io Ubuntu:14.04:LTS

    Versions
    • 0.6.7+dfsg1-1
    • 0.6.7+dfsg1-2
    • 0.6.7+dfsg1-3
    • 0.7.1+dfsg1-1
    • 0.7.6+dfsg1-1
    • 0.8.1+dfsg1-1
    • 0.9.1~dfsg1-2
    • 1.0.1~dfsg1-0ubuntu1~ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 1.6.2~dfsg1-1ubuntu4~14.04.1

    Update to 1.6.2~dfsg1-1ubuntu4~14.04.1

  • docker.io Ubuntu:16.04:LTS

    Affected ranges
    • ECOSYSTEM: < 1.6.2~dfsg1-1ubuntu4

    Update to 1.6.2~dfsg1-1ubuntu4

Original sources

Check your server →