cve/2015/CVE-2015-3629.md

CVE-2015-3629

Description

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

POC

Reference

• http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/xxg1413/docker-security