CVE-2015-3627: docker Link Following
CVSS: 7.2v2.0HighModified
AliasesUBUNTU-CVE-2015-3627DEBIAN-CVE-2015-3627CGA-2wf9-j987-f52rCGA-44gh-jjg5-h96gCGA-4gfm-99jw-vvvxCGA-64fv-2h5w-34ccCGA-8j9c-jrgp-9m74CGA-94rm-2chm-vprfCGA-c67f-5ppw-jm99CGA-cx5h-789c-m85xCGA-cxp5-hm25-4mxvCGA-fxmr-5xv9-m2cwCGA-h25f-h78j-7hp9CGA-j4f3-mxq7-fpprCGA-j8f7-2m3q-h7jcCGA-m433-hm29-4cpmCGA-pvfc-357w-24w8CGA-v76p-rw7r-4mv6GHSA-g7v2-2qxx-wjrwGO-2022-0649
Published 18-05-2015Last modified 06-08-2024
Vulnerability summary
CVE-2015-3627 is a high (CVSS 7.2) Link Following vulnerability in docker. EPSS estimates a 0.61% chance of exploitation in the next 30 days, higher than 48% of scored vulnerabilities.
CVSS score
7.2/10
010
High · v2.0 (NVD)EPSS score
0.61%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 6 · Related 7Timeline
- 18-05-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.2Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
0.61%
Chance of exploitation in the next 30 days
Percentile
48%
Versus all other CVEs
30-day change
0.00 pp
From 0.61% on 18-09-2026
18-09-202618-10-2026
EPSS score0.61%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard8 products
- dockerAll versions (No fix recorded)
- docker-config-mirror-gcrAll versions (No fix recorded)
- docker-dindAll versions (No fix recorded)
- docker-initAll versions (No fix recorded)
- docker-oci-entrypointAll versions (No fix recorded)
Wolfi8 products
- dockerAll versions (No fix recorded)
- docker-config-mirror-gcrAll versions (No fix recorded)
- docker-dindAll versions (No fix recorded)
- docker-initAll versions (No fix recorded)
- docker-oci-entrypointAll versions (No fix recorded)
Docker2 products
- docker≤ 1.6
- libcontainer≤ 1.6.0
Debian1 product
- docker.io< 1.6.1+dfsg1-1
Github.com/docker1 product
- docker< 1.6.1
Ubuntu1 product
- docker.io< 1.6.2~dfsg1-1ubuntu4~14.04.1
6 vendors · 21 products
