PT-2015-6251 · Docker+2 · Docker Engine+3

Eric Windisch · Published 2015-05-08 · Updated 2025-10-11 · CVE-2015-3631

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 1.6.1

Description The issue allows local users to set arbitrary Linux Security Modules (LSM) and docker t policies via an image that allows volumes to override files in /proc. This can be achieved by exploiting the ability of Docker Engine to allow volumes to override files in the /proc directory, potentially leading to unauthorized access or modifications to system configurations.

Recommendations For Docker Engine versions prior to 1.6.1, update to version 1.6.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of volumes that can override files in /proc to minimize the risk of exploitation. Avoid using images that allow volumes to override sensitive system files until the issue is resolved.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

CWE-264

Related Identifiers

ALT-PU-2015-1429

CVE-2015-3631

GHSA-V4H8-794J-G8MM

GO-2022-0708

OPENSUSE-SU-2024:10532-1

OPENSUSE-SU-2025:15589-1

SUSE-SU-2015:0984-1

SUSE-SU-2025:03540-1

SUSE-SU-2025:03545-1

Affected Products

Alt Linux

Docker

Docker Engine

Suse

References · 270

• https://cve.org/CVERecord?id=CVE-2015-3631 · Security Note
• https://ubuntu.com/security/CVE-2015-3631 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15589-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03540-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-3631 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-3631 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2015:0984-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03545-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-3631 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-3631 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v4h8-794j-g8mm · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10532-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3631 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0708 · Vendor Advisory