VYPR

Libcontainer

by Docker

Source repositories

CVEs (2)

  • CVE-2015-3629HigMay 18, 2015
    risk 0.44cvss 7.8epss 0.01

    Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

  • CVE-2015-3627May 18, 2015
    risk 0.00cvss epss 0.01

    Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.