Summary
generated automatically from NVD dataCVE-2015-3631 affects Docker Engine before 1.6.1. A local user can use an image that lets volumes override files in /proc to set arbitrary Linux Security Modules (LSM) and docker_t policies. This could undermine the container security policy, with limited impact on integrity and availability. The flaw is categorized as CWE-264 and has a CVSS v2.0 score of 3.6 (LOW).
NVD description
Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.
EPSS · FIRST.org
0.57%probability of exploitation in the next 30 days
Higher than 47% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-30, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 18 mai 2015
- Updated
- 17 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (8)
Similar CVEs
Other vulnerabilities of type CWE-264
Running Docker? Know which CVEs hit your version.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.