Security Advisory
CVE-2015-3629
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.