Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Libcontainer和Docker Engine 权限许可和访问控制漏洞
Vulnerability Description
Libcontainer和Docker Engine都是美国Docker公司的产品。Libcontainer是一个Linux容器。Docker Engine是一套轻量级的运行环境和包管理工具。 Libcontainer和Docker Engine 1.6.1之前版本中存在安全漏洞，该漏洞源于程序在执行更改根目录操作前打开文件描述符（传递到pid-1进程）。本地攻击者可通过在图像上实施符号链接攻击利用该漏洞获取权限。
CVSS Information
N/A
Vulnerability Type
N/A