Docker

Records133All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high66CVSS 7.0–8.9

Exploited now

Docker records in CISA KEV

TI-2019-11833 Docker Desktop Community Edition Privilege Escalation Vulnerability CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Docker 37 records CRITICAL Docker Desktop 18 records MEDIUM Desktop 13 records HIGH Engine 6 records MEDIUM Command Line Interface 2 records LOW Cs Engine 2 records LOW Libcontainer 2 records LOW Notary 2 records MEDIUM

Records

2 records in Libcontainer · all components

TI-2015-03070 CVE-2015-3629 · GHSA-g44j-7vp3-68cv

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape…

LOW 35

Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a c…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00603 Published 2015-05-18 Fixed in 1.6.1 CWE-59

TI-2015-03068 CVE-2015-3627 · GHSA-g7v2-2qxx-wjrw

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1…

LOW 33

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00609 Published 2015-05-18 Fixed in 1.6.1 CWE-59

Open these records in search →

Critical	24
High	66
Medium	40
Low	3
No CVSS	0