Skip to content

Product

docker libcontainer vulnerabilities

2 published CVES affecting docker libcontainer, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest docker libcontainer CVEs

Newest publication first

  1. CVE-2015-3629 Arbitrary File Write in Libcontainer

    Published
    HighCVSS 7.8 Public exploit

    Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

  2. CVE-2015-3627 Symlink Attack in Libcontainer and Docker Engine

    Published
    HighCVSS 7.2 EPSS 0.61% Public exploit

    Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.