Medium severity · published Jan 31, 2017
CVE-2016-9962
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container
6.4
CVSS
0.4%
EPSS
No
On KEV
Description
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Docker · Docker
1.11.0 before 1.12.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-9962
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-9962
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2017-0116.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2017-0123.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2017-0127.html
Mailing List
http://seclists.org/fulldisclosure/2017/Jan/21
Mailing List
http://seclists.org/fulldisclosure/2017/Jan/29
www.securityfocus.com
http://www.securityfocus.com/archive/1/540001/100/0/threaded
More from Docker
7.8
CVE-2019-15752
Docker Desktop Community Edition Privilege Escalation Vulnerability
9.8
CVE-2014-0048
An issue was found in Docker before 1.6.0
9.8
CVE-2019-14271
In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that…
8.8
CVE-2020-14300
The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053)…
8.8
CVE-2020-14298
The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which…