Safeguard
Tag

toctou-vulnerability

Safeguard articles tagged "toctou-vulnerability" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Docker symlink race condition escape (CVE-2018-15664)

A TOCTOU race in Docker's docker cp symlink resolution let malicious containers write to host files as root. Impact, CVSS, and fixes inside.

Dec 15, 20258 min read
toctou-vulnerability — Safeguard Blog