CVE-2018-15664: Race Condition
In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon/archive.go does not do archive operations on a frozen filesystem (or from within a chroot).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-15664?
CVE-2018-15664 is considered critical as it allows arbitrary read-write access to the host filesystem with root privileges.
How do I fix CVE-2018-15664?
To fix CVE-2018-15664, update Docker to versions 20.10.5+dfsg1-1+deb11u2 or later, or apply applicable patches.
Which Docker versions are affected by CVE-2018-15664?
CVE-2018-15664 affects Docker versions prior to 20.10.5, including various releases from 17.06.0-ce up to 18.06.1-ce.
What type of attack does CVE-2018-15664 exploit?
CVE-2018-15664 exploits a symlink-exchange vulnerability along with directory traversal attacks.
What are the consequences of exploiting CVE-2018-15664?
Exploitation of CVE-2018-15664 can result in unauthorized access to sensitive files and potential system compromise due to root-level access.