{
  "cveId": "CVE-2018-15664",
  "url": "https://patchblox.com/security/cve/CVE-2018-15664",
  "summary": "CVE-2018-15664 is fixed in 5 products on 1 platform, first by docker.io 18.09.7-0ubuntu1~18.04.3, released May 22, 2019. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Docker Elevation of Privilege Vulnerability",
  "description": "\u003Cp\u003E\u003Cstrong\u003ESummary\u003C/strong\u003E\u003C/p\u003E\n\u003Cp\u003ECVE-2018-15664 describes a vulnerability in the Docker runtime (and the underlying community project, Moby) wherein a malicious/compromised container can acquire full read/write access to the host operating system where that container is running. The vulnerability depends on the way that the Docker runtime handles symbolic links and is most directly exploitable through the Docker copy API (\u2018docker cp\u2019 in the Docker CLI).\u003C/p\u003E\n\u003Cp\u003E\u003Cstrong\u003EWhat is the risk for Azure Kubernetes Service (AKS) and Azure IoT Edge customers?\u003C/strong\u003E\u003C/p\u003E\n\u003Cp\u003EThe risk for AKS and Azure IoT Edge customers is minimal as the following need to be true:\u003C/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EA container on the host must be compromised.\u003C/li\u003E\n\u003Cli\u003EThe attacker must have access to the host machine, as the docker API is not exposed by default from outside of the host.\u003C/li\u003E\n\u003C/ul\u003E",
  "published": "2019-05-22T17:00:00Z",
  "severity": "Important",
  "epss": 0.03427,
  "epssPercentile": 0.88981,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": true,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-15664",
  "fixes": [
    {
      "platform": "linux",
      "product": "docker-stable",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "24.0.9_ce-150000.1.25.1",
      "fix": "SUSE-SU-2025:03545-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03545-1",
      "released": "2025-10-11T01:20:50Z"
    },
    {
      "platform": "linux",
      "product": "docker-stable",
      "release": "sles 15.6",
      "fixedVersion": "24.0.9_ce-150000.1.25.1",
      "fix": "SUSE-SU-2025:03545-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03545-1",
      "released": "2025-10-11T01:20:50Z"
    },
    {
      "platform": "linux",
      "product": "docker-stable",
      "release": "sles 15.7",
      "fixedVersion": "24.0.9_ce-150000.1.25.1",
      "fix": "SUSE-SU-2025:03545-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03545-1",
      "released": "2025-10-11T01:20:50Z"
    },
    {
      "platform": "linux",
      "product": "docker.io",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "18.09.7-0ubuntu1~18.04.3",
      "fix": "docker.io 18.09.7-0ubuntu1~18.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-docker.io-18.09.7-0ubuntu1-18.04.3",
      "released": "2019-05-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "golang-docker-dev",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "18.09.7-0ubuntu1~18.04.3",
      "fix": "golang-docker-dev 18.09.7-0ubuntu1~18.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-golang-docker-dev-18.09.7-0ubuntu1-18.04.3",
      "released": "2019-05-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "golang-github-docker-docker-dev",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "18.09.7-0ubuntu1~18.04.3",
      "fix": "golang-github-docker-docker-dev 18.09.7-0ubuntu1~18.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-golang-github-docker-docker-dev-18.09.7-0ubuntu1-18.04.3",
      "released": "2019-05-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "vim-syntax-docker",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "18.09.7-0ubuntu1~18.04.3",
      "fix": "vim-syntax-docker 18.09.7-0ubuntu1~18.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-vim-syntax-docker-18.09.7-0ubuntu1-18.04.3",
      "released": "2019-05-22T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}