| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/docker/docker | < 1.6.1 | 1.6.1 |
| docker | ≤ 1.6 | |
| libcontainer | ≤ 1.6.0 |
Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free