PT-2015-6249 · Docker+2 · Docker Engine+3

Tõnis Tiigi · Published 2015-05-08 · Updated 2025-10-11 · CVE-2015-3629

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Docker Engine using Libcontainer version 1.6.0

Description The issue allows local users to escape containerization and write to arbitrary files on the host system via a symlink attack in an image when respawning a container. This is due to a "mount namespace breakout" in Libcontainer.

Recommendations For Docker Engine using Libcontainer version 1.6.0, consider restricting access to the container respawning functionality until a patch is available. As a temporary workaround, avoid using images that may be used for symlink attacks.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ALT-PU-2015-1429

CVE-2015-3629

GHSA-G44J-7VP3-68CV

GO-2022-0647

OPENSUSE-SU-2024:10532-1

OPENSUSE-SU-2025:15589-1

SUSE-SU-2015:0984-1

SUSE-SU-2025:03540-1

SUSE-SU-2025:03545-1

Affected Products

Alt Linux

Docker Engine

Libcontainer

Suse

References · 272

• https://osv.dev/vulnerability/openSUSE-SU-2024:10532-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-3037.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-3629 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-3629 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03545-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15589-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g44j-7vp3-68cv · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3629 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-3629 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03540-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-3629 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0647 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:0984-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-3629 · Vendor Advisory