| id: GO-2022-0649 |
| modules: |
| - module: github.com/docker/docker |
| versions: |
| - fixed: 1.6.1 |
| vulnerable_at: 1.6.0 |
| summary: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker |
| cves: |
| - CVE-2015-3627 |
| ghsas: |
| - GHSA-g7v2-2qxx-wjrw |
| references: |
| - advisory: https://github.com/advisories/GHSA-g7v2-2qxx-wjrw |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2015-3627 |
| - fix: https://github.com/docker/docker/commit/d5ebb60bddbabea0439213501f4f6ed494b23cba |
| - web: https://groups.google.com/forum/#%21searchin/docker-user/1.6.1/docker-user/47GZrihtr-4/nwgeOOFLexIJ |
| - web: https://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html |
| - web: https://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html |
| - web: https://seclists.org/fulldisclosure/2015/May/28 |
| source: |
| id: GHSA-g7v2-2qxx-wjrw |
| created: 2024-08-20T14:11:15.510717-04:00 |
| review_status: UNREVIEWED |
| unexcluded: NOT_IMPORTABLE |
