VDB
GO-2022-0649
GO-2022-0649
PUBLISHED
Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | docker | *, *, * |
| github.com | docker/docker | 0, 0 |
| wolfi | docker | *, *, * |
Timeline
- Aug 21, 2024 CVE Published
- Feb 4, 2026 CVE Updated
- May 18, 2026 Security Advisory
References
- https://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html url
- https://github.com/advisories/GHSA-g7v2-2qxx-wjrw advisory
- https://nvd.nist.gov/vuln/detail/CVE-2015-3627 advisory
- https://groups.google.com/forum/#%21searchin/docker-user/1.6.1/docker-user/47GZrihtr-4/nwgeOOFLexIJ url
- https://seclists.org/fulldisclosure/2015/May/28 url
- https://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html exploit
- https://github.com/docker/docker/commit/d5ebb60bddbabea0439213501f4f6ed494b23cba fix