3 ms·
http://www.cvedetails.com/product/28125/Docker-Docker.html?vendor_id=13534 http://www.cvedetails.com/product/28125/Docker-Docker.html?v... https://github.com/d
by seanp2k2 11y ago
http://www.cvedetails.com/product/28125/Docker-Docker.html?vendor_id=13534 http://www.cvedetails.com/product/28125/Docker-Docker.html?v...
https://github.com/docker/docker/issues/12317 https://github.com/docker/docker/issues/12317
https://github.com/gabrtv/shocker https://github.com/gabrtv/shocker
https://www.oreilly.com/ideas/docker-security https://www.oreilly.com/ideas/docker-security
I'm sure there will be more
Edit: yup, as cited below: https://conference.hitb.org/hitbsecconf2016ams/sessions/escape-from-the-docker-kvm-qemu-machine/ https://conference.hitb.org/hitbsecconf2016ams/sessions/esca...
- cyphar 11y agoMost of the vulnerabilities you mention are actually kernel vulnerabilities. While they affect Docker, they more accurately affect everything that uses "Linux containers". Although, Docker did have a bad history of security bugs with symlinks. But given the fact that Linux doesn't have real containers, I feel very conflicted about opening that up to the internet.