Database/Container, Kubernetes & orchestration
Docker / moby: `docker cp` symlink-exchange TOCTOU gives arbitrary host read/write as root
CVE-2018-15664Container, Kubernetes & orchestrationcurated
Impact
docker cp symlink-exchange TOCTOU gives arbitrary host read/write as root
Who can reach it
Any tenant workload on a node whose operator uses docker cp
What to do
Upgrade Docker Engine; restart daemon (drains containers unless live-restore is on)
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.