CVE

Id
80907  
CVE No.
CVE-2015-3630  
Status
Candidate  
Description
Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image.  
Phase
Assigned (20150501)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
729818 80907 CVE-2015-3630 FULLDISC:20150508 Docker 1.6.1 - Security Advisory [150507]  View
729819 80907 CVE-2015-3630 URL:http://seclists.org/fulldisclosure/2015/May/28  View
729820 80907 CVE-2015-3630 MISC:http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html  View
729821 80907 CVE-2015-3630 CONFIRM:https://groups.google.com/forum/#!searchin/docker-user/1.6.1/docker-user/47GZrihtr-4/nwgeOOFLexIJ  View
729822 80907 CVE-2015-3630 SUSE:openSUSE-SU-2015:0905  View
729823 80907 CVE-2015-3630 URL:http://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html  View
729824 80907 CVE-2015-3630 BID:74566  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8061 JVNDB-2015-003381 Apple OS X の Apple Type Services における任意のコードを実行される脆弱性 Apple OS X の Apple Type Services (ATS) には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-3682 80907 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003381.html  View