CVE-2016-9962
- State
- Published
- Severity
- Not scored
- Published
- Jan 31, 2017
- Updated
- Aug 6, 2024
- Reserved
- Dec 15, 2016
Description
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 95361vdb-entry
- https://github.com/docker/docker/releases/tag/v1.12.6
- RHSA-2017:0116vendor-advisory
- 20170111 Re: [oss-security] Docker 1.12.6 - Security Advisorymailing-list
- FEDORA-2017-fcd02e2c2dvendor-advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1012568#c6
- GLSA-201701-34vendor-advisory
- RHSA-2017:0123vendor-advisory
- https://github.com/opencontainers/runc/commit/50a19c6ff828c58e5dab13830bd3dacde268afe5
- RHSA-2017:0127vendor-advisory
- FEDORA-2017-c2c2d1be16vendor-advisory
- https://access.redhat.com/security/vulnerabilities/cve-2016-9962
- FEDORA-2017-dbc2b618ebvendor-advisory
- FEDORA-2017-0200646669vendor-advisory
- 20170111 Re: [oss-security] Docker 1.12.6 - Security Advisorymailing-list
- 20170110 Docker 1.12.6 - Security Advisorymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.