[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247974

 
 

909

 
 

194654

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Privilege escalation vulnerability in docker.io via a symlink attack in an image

ID: oval:org.secpod.oval:def:42577Date: (C)2017-10-27   (M)2021-12-10
Class: VULNERABILITYFamily: unix




The host is installed with docker.io on Ubuntu 14.04 or 16.04 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly handle a symlink attack. Successful exploitation could allow local users to gain privileges.

Platform:
Ubuntu 14.04
Product:
docker.io
Reference:
CVE-2015-3627
CVE    1
CVE-2015-3627
CPE    2
cpe:/a:dockerproject:docker.io
cpe:/o:ubuntu:ubuntu_linux:14.04

© SecPod Technologies