CVE
CVE-2018-15664
- First Reported
- Jul 8, 2026
- Latest Reported
- Jul 8, 2026
CVE Enrichment
- CVSS
- 7.5 HIGH
- EPSS
- 3.43%
- EPSS Percentile
- 88.63%
- CISA KEV
- Not listed
Description
In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon/archive.go does not do archive operations on a frozen filesystem (or from within a chroot).
Technical Details
- CVSS Version
- 3.0
- CNA / NVD Source
- cve@mitre.org
- Published
- 23-May-2019 21:29
- Last Modified
- 17-Jun-2026 08:42
- EPSS Date
- 2026-10-12
- CWE
- CWE-362
CVSS Vector
CVSS:3.0 AV:L /
AC:H /
PR:L /
UI:R /
S:C /
C:H /
I:H /
A:H
Affected Products / Versions
- docker / docker
Version / affected range: 17.06.0-ce
cpe:2.3:a:docker:docker:17.06.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.0-ce
cpe:2.3:a:docker:docker:17.06.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.0-ce
cpe:2.3:a:docker:docker:17.06.0-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.0-ce
cpe:2.3:a:docker:docker:17.06.0-ce:rc3:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.0-ce
cpe:2.3:a:docker:docker:17.06.0-ce:rc4:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.0-ce
cpe:2.3:a:docker:docker:17.06.0-ce:rc5:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.1-ce
cpe:2.3:a:docker:docker:17.06.1-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.1-ce
cpe:2.3:a:docker:docker:17.06.1-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.1-ce
cpe:2.3:a:docker:docker:17.06.1-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.1-ce
cpe:2.3:a:docker:docker:17.06.1-ce:rc3:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.1-ce
cpe:2.3:a:docker:docker:17.06.1-ce:rc4:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.2-ce
cpe:2.3:a:docker:docker:17.06.2-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 17.06.2-ce
cpe:2.3:a:docker:docker:17.06.2-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 17.07.0-ce
cpe:2.3:a:docker:docker:17.07.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 17.07.0-ce
cpe:2.3:a:docker:docker:17.07.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 17.07.0-ce
cpe:2.3:a:docker:docker:17.07.0-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 17.07.0-ce
cpe:2.3:a:docker:docker:17.07.0-ce:rc3:*:*:community:*:*:* - docker / docker
Version / affected range: 17.07.0-ce
cpe:2.3:a:docker:docker:17.07.0-ce:rc4:*:*:community:*:*:* - docker / docker
Version / affected range: 17.09.0-ce
cpe:2.3:a:docker:docker:17.09.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 17.09.0-ce
cpe:2.3:a:docker:docker:17.09.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 17.09.0-ce
cpe:2.3:a:docker:docker:17.09.0-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 17.09.0-ce
cpe:2.3:a:docker:docker:17.09.0-ce:rc3:*:*:community:*:*:* - docker / docker
Version / affected range: 17.09.1-ce
cpe:2.3:a:docker:docker:17.09.1-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 17.09.1-ce-
cpe:2.3:a:docker:docker:17.09.1-ce-:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 17.10.0-ce
cpe:2.3:a:docker:docker:17.10.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 17.10.0-ce
cpe:2.3:a:docker:docker:17.10.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 17.10.0-ce
cpe:2.3:a:docker:docker:17.10.0-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 17.11.0-ce
cpe:2.3:a:docker:docker:17.11.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 17.11.0-ce
cpe:2.3:a:docker:docker:17.11.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 17.11.0-ce
cpe:2.3:a:docker:docker:17.11.0-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 17.11.0-ce
cpe:2.3:a:docker:docker:17.11.0-ce:rc3:*:*:community:*:*:* - docker / docker
Version / affected range: 17.11.0-ce
cpe:2.3:a:docker:docker:17.11.0-ce:rc4:*:*:community:*:*:* - docker / docker
Version / affected range: 17.12.0-ce
cpe:2.3:a:docker:docker:17.12.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 17.12.0-ce
cpe:2.3:a:docker:docker:17.12.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 17.12.0-ce
cpe:2.3:a:docker:docker:17.12.0-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 17.12.0-ce
cpe:2.3:a:docker:docker:17.12.0-ce:rc3:*:*:community:*:*:* - docker / docker
Version / affected range: 17.12.0-ce
cpe:2.3:a:docker:docker:17.12.0-ce:rc4:*:*:community:*:*:* - docker / docker
Version / affected range: 17.12.1-ce
cpe:2.3:a:docker:docker:17.12.1-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 17.12.1-ce
cpe:2.3:a:docker:docker:17.12.1-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 17.12.1-ce
cpe:2.3:a:docker:docker:17.12.1-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 18.01.0-ce
cpe:2.3:a:docker:docker:18.01.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 18.01.0-ce
cpe:2.3:a:docker:docker:18.01.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 18.02.0-ce
cpe:2.3:a:docker:docker:18.02.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 18.02.0-ce
cpe:2.3:a:docker:docker:18.02.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 18.02.0-ce
cpe:2.3:a:docker:docker:18.02.0-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 18.03.0-ce
cpe:2.3:a:docker:docker:18.03.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 18.03.0-ce
cpe:2.3:a:docker:docker:18.03.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 18.03.0-ce
cpe:2.3:a:docker:docker:18.03.0-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 18.03.0-ce
cpe:2.3:a:docker:docker:18.03.0-ce:rc3:*:*:community:*:*:* - docker / docker
Version / affected range: 18.03.0-ce
cpe:2.3:a:docker:docker:18.03.0-ce:rc4:*:*:community:*:*:* - docker / docker
Version / affected range: 18.03.1-ce
cpe:2.3:a:docker:docker:18.03.1-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 18.03.1-ce
cpe:2.3:a:docker:docker:18.03.1-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 18.03.1-ce
cpe:2.3:a:docker:docker:18.03.1-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 18.04.0-ce
cpe:2.3:a:docker:docker:18.04.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 18.04.0-ce
cpe:2.3:a:docker:docker:18.04.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 18.04.0-ce
cpe:2.3:a:docker:docker:18.04.0-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 18.05.0-ce
cpe:2.3:a:docker:docker:18.05.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 18.05.0-ce
cpe:2.3:a:docker:docker:18.05.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 18.06.0-ce
cpe:2.3:a:docker:docker:18.06.0-ce:*:*:*:community:*:*:* - docker / docker
Version / affected range: 18.06.0-ce
cpe:2.3:a:docker:docker:18.06.0-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 18.06.0-ce
cpe:2.3:a:docker:docker:18.06.0-ce:rc2:*:*:community:*:*:* - docker / docker
Version / affected range: 18.06.0-ce
cpe:2.3:a:docker:docker:18.06.0-ce:rc3:*:*:community:*:*:* - docker / docker
Version / affected range: 18.06.1-ce
cpe:2.3:a:docker:docker:18.06.1-ce:rc1:*:*:community:*:*:* - docker / docker
Version / affected range: 18.06.1-ce
cpe:2.3:a:docker:docker:18.06.1-ce:rc2:*:*:community:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- nvd@nist.gov
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- Symlinks have been exploited for decades – in race conditions (CVE-2018-15664), in package managers (CVE-2021-32803), in container escapes (CVE-2024-21626). Any time a tool writes to a user-controlled path without Symlink Flaws in Six AI Coding Assistants Could Expose Files and Enable Code Execution
CVE (4)
MITRE ATT&CK (2)
Vendors (6)
Products (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.