Exploit for docker_escape_pwn

CVE-2017-1000112 CVE-2017-18344

kitploit · 2026-08-25

Description

Docker container escape via CVE-2017-1000112 and CVE-2017-18344 gaining root and bypassing seccomp.

Entry point

Parameterpid · path

Path/proc/$PID/timers

Procfs timer information leakage for a specific process, enables arbitrary kernel memory read

Affected Linux Linux Kernel versions

Linux Linux Kernel< 3.10.108, 3.16.47, 3.18.65, 4.4.82, 4.9.43, 4.12.7, 4.14.8

All known vulnerabilities by product

Alt Linux Centos Linux Kernel Red Hat Suse Ubuntu

CVSS Score

7.0

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:HIGH

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-08-25 07:57

Last Seen:2026-08-26 00:46

Reporter:KitPloit

Tags

Dockercontainer escapeCVE-2017-1000112CVE-2017-18344seccomp bypassprivilege escalationcgroup bypass

Other exploits for the same CVE

kernel-exploits

2026-08-27 KitPloitKITPLOIT

linux-kernel-exploits

2026-08-27 KitPloitKITPLOIT

CVE-2017-1000112

2026-08-27 KitPloitKITPLOIT

CVE-2017-1000112-Adpated

2026-08-27 KitPloitKITPLOIT

CVE-2017-1000112-PoC

2026-08-27 KitPloitKITPLOIT

kernel-exploits

2026-08-26 KitPloitKITPLOIT

kernel-exploits

2026-08-26 KitPloitKITPLOIT

exploit_linux_kernel4.13

2026-08-25 KitPloitKITPLOIT

Exploit Code

MARKDOWN9 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-HIKAME-DOCKER_ESCAPE_PWN
CVE-2017-1000112 および CVE-2017-18344 を使用した Docker からのエスケープ 含まれるもの:

  * root権限の取得
  * すべてのケーパビリティを取得
  * 名前空間の復旧
  * ファイルシステムの復旧
  * cgroup制限の回避
  * seccompの回避