VDB

DEBIAN-CVE-2015-3629

DEBIAN-CVE-2015-3629 PUBLISHED CVSS 7.800000190734863 HIGH

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:13docker.io0, 0, 0
Debian:11docker.io0, 0, 0
Debian:12docker.io0, 0, 0
Debian:14docker.io0, 0, 0

Timeline

  • May 18, 2015 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›