Summary
generated automatically from NVD dataLibcontainer and Docker Engine before 1.6.1 contain a link-following flaw (CWE-59) in how they handle the file descriptor passed to the pid-1 process. The descriptor is opened before the chroot is performed, so a symlink placed in a container image can be abused by a local user to gain elevated privileges. The CVSS v2.0 score is 7.2 (HIGH), with a local attack vector and high impact on confidentiality, integrity and availability.
NVD description
Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.
EPSS · FIRST.org
0.61%probability of exploitation in the next 30 days
Higher than 49% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-30, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 18 mai 2015
- Updated
- 17 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (8)
Similar CVEs
Other vulnerabilities of type CWE-59
Running Docker? Know which CVEs hit your version.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.