CVE-2015-3627 describes a privilege escalation vulnerability affecting Libcontainer and Docker Engine versions prior to 1.6.1. The flaw allows local users to gain elevated privileges through a symlink attack during the chroot process by manipulating a file-descriptor passed to the pid-1 process. With a CVSS score of 7.2 (High), this vulnerability has low attack complexity and no authentication required, potentially leading to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.6CPE matchmatch criteria | cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:* | ||
<= 1.6.0CPE matchmatch criteria | cpe:2.3:a:docker:libcontainer:*:*:*:*:*:docker:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Symlink Attack in Libcontainer and Docker Engine
Feb 15, 2022CVE-2015-3627
Jul 13, 2021docker: insecure opening of file-descriptor 1 leading to privilege escalation
May 7, 2015Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot which allows local users to gain privileges via a symlink attack in an image.
May 2, 2015