p PatchFirst

CVE-2015-3631

CVE-2015-3631

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.

EPSS 0.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • docker.io Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.6.1+dfsg1-1

    Update to 1.6.1+dfsg1-1

  • docker.io Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.6.1+dfsg1-1

    Update to 1.6.1+dfsg1-1

  • docker.io Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.6.1+dfsg1-1

    Update to 1.6.1+dfsg1-1

  • docker.io Ubuntu:14.04:LTS

    Versions
    • 0.6.7+dfsg1-1
    • 0.6.7+dfsg1-2
    • 0.6.7+dfsg1-3
    • 0.7.1+dfsg1-1
    • 0.7.6+dfsg1-1
    • 0.8.1+dfsg1-1
    • 0.9.1~dfsg1-2
    • 1.0.1~dfsg1-0ubuntu1~ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 1.6.2~dfsg1-1ubuntu4~14.04.1

    Update to 1.6.2~dfsg1-1ubuntu4~14.04.1

  • docker.io Ubuntu:16.04:LTS

    Affected ranges
    • ECOSYSTEM: < 1.6.2~dfsg1-1ubuntu4

    Update to 1.6.2~dfsg1-1ubuntu4

Original sources

Check your server →