CVE-2015-3630
Fixed in a distro release EPSS <1%
Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image.
Products: docker
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/docker/docker | 1.6.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | docker.io | 1.6.1+dfsg1-1 |
| Debian 13 | docker.io | 1.6.1+dfsg1-1 |
| Debian 14 | docker.io | 1.6.1+dfsg1-1 |
| Red Hat rhel extras other 7 | atomic | 0:0-0.40.gitf863afd.el7 |
| Red Hat rhel extras other 7 | docker | 0:1.6.2-14.el7 |
| Red Hat rhel extras other 7 | docker-logrotate | 0:1.6.2-14.el7 |
| Red Hat rhel extras other 7 | docker-python | 0:1.0.0-53.el7 |
| Red Hat rhel extras other 7 | docker-selinux | 0:1.6.2-14.el7 |
| Red Hat rhel extras other 7 | python-websocket-client | 0:0.14.1-97.el7 |
| SUSE Enterprise Storage 7.1 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 15 SP6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 15 SP7 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 12 | docker | 1.6.2-31.2 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | docker | 1.6.2-31.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| Ubuntu 14.04 LTS | docker.io | 1.6.2~dfsg1-1ubuntu4~14.04.1 |
| Ubuntu 16.04 LTS | docker.io | 1.6.2~dfsg1-1ubuntu4 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| openSUSE Tumbleweed | docker | 1.12.3-4.1 |
| openSUSE Tumbleweed | docker-stable | 24.0.9_ce-15.1 |