| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/docker/docker | ≥ 1.6.0, < 1.6.1 | 1.6.1 |
| docker | ≤ 1.6 |
Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free