id: GO-2022-0649
modules:
    - module: github.com/docker/docker
      versions:
        - fixed: 1.6.1
      vulnerable_at: 1.6.0
summary: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker
cves:
    - CVE-2015-3627
ghsas:
    - GHSA-g7v2-2qxx-wjrw
references:
    - advisory: https://github.com/advisories/GHSA-g7v2-2qxx-wjrw
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2015-3627
    - fix: https://github.com/docker/docker/commit/d5ebb60bddbabea0439213501f4f6ed494b23cba
    - web: https://groups.google.com/forum/#%21searchin/docker-user/1.6.1/docker-user/47GZrihtr-4/nwgeOOFLexIJ
    - web: https://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html
    - web: https://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html
    - web: https://seclists.org/fulldisclosure/2015/May/28
source:
    id: GHSA-g7v2-2qxx-wjrw
    created: 2024-08-20T14:11:15.510717-04:00
review_status: UNREVIEWED
unexcluded: NOT_IMPORTABLE