CVE-2015-3629

Name of the Vulnerable Software and Affected Versions Docker Engine using Libcontainer version 1.6.0

Description The issue allows local users to escape containerization and write to arbitrary files on the host system via a symlink attack in an image when respawning a container. This is due to a "mount namespace breakout" in Libcontainer.

Recommendations For Docker Engine using Libcontainer version 1.6.0, consider restricting access to the container respawning functionality until a patch is available. As a temporary workaround, avoid using images that may be used for symlink attacks.