CVE-2015-3631

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.57%

Published

May 18, 2015

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.

Weaknesses (CWE)

CWE-264

Affected Products (1)

docker · dockervulnerable

References (8)

http://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html

http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html

http://seclists.org/fulldisclosure/2015/May/28

https://groups.google.com/forum/#%21searchin/docker-user/1.6.1/docker-user/47GZrihtr-4/nwgeOOFLexIJ

http://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html

http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html

http://seclists.org/fulldisclosure/2015/May/28

https://groups.google.com/forum/#%21searchin/docker-user/1.6.1/docker-user/47GZrihtr-4/nwgeOOFLexIJ

KEV Catalog EPSS Scores Vendors All CVEs