CVE-2015-3631: Medium severity Docker docker vulnerability
Published May 18, 2015
·Updated
Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and dockert policies via an image that allows volumes to override files in /proc.
Affected Software
2 affected componentsFixes available
go/github.com/docker/docker<1.6.1
1.6.1
Docker docker<=1.6
Event History
May 18, 2015
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Feb 15, 2022
Advisory Published
via GitHub·01:57 AM
Frequently Asked Questions
1
What is the severity of CVE-2015-3631?
CVE-2015-3631 has a high severity rating due to the potential for privilege escalation in Docker.
2
How do I fix CVE-2015-3631?
To fix CVE-2015-3631, update Docker Engine to version 1.6.1 or later.
3
Who is affected by CVE-2015-3631?
Local users of Docker Engine versions prior to 1.6.1 are affected by CVE-2015-3631.
4
What kind of vulnerability is CVE-2015-3631?
CVE-2015-3631 is a privilege escalation vulnerability that allows users to manipulate Linux Security Modules.
5
What versions of Docker are vulnerable to CVE-2015-3631?
Docker Engine versions up to 1.6.0 are vulnerable to CVE-2015-3631.