CVE

Id
96782  
CVE No.
CVE-2016-9962  
Status
Candidate  
Description
RunC allowed additional container processes via "runc exec" to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.  
Phase
Assigned (20161215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
801745 96782 CVE-2016-9962 BUGTRAQ:20170111 Re: [oss-security] Docker 1.12.6 - Security Advisory  View
801746 96782 CVE-2016-9962 URL:http://www.securityfocus.com/archive/1/archive/1/540001/100/0/threaded  View
801747 96782 CVE-2016-9962 FULLDISC:20170110 Docker 1.12.6 - Security Advisory  View
801748 96782 CVE-2016-9962 URL:http://seclists.org/fulldisclosure/2017/Jan/21  View
801749 96782 CVE-2016-9962 FULLDISC:20170111 Re: [oss-security] Docker 1.12.6 - Security Advisory  View
801750 96782 CVE-2016-9962 URL:http://seclists.org/fulldisclosure/2017/Jan/29  View
801751 96782 CVE-2016-9962 CONFIRM:https://access.redhat.com/security/vulnerabilities/cve-2016-9962  View
801752 96782 CVE-2016-9962 CONFIRM:https://bugzilla.suse.com/show_bug.cgi?id=1012568#c6  View
801753 96782 CVE-2016-9962 CONFIRM:https://github.com/docker/docker/releases/tag/v1.12.6  View
801754 96782 CVE-2016-9962 CONFIRM:https://github.com/opencontainers/runc/commit/50a19c6ff828c58e5dab13830bd3dacde268afe5  View
801755 96782 CVE-2016-9962 FEDORA:FEDORA-2017-0200646669  View
801756 96782 CVE-2016-9962 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UVM7FCOQMPKOFLDTUYSS4ES76DDM56VP/  View
801757 96782 CVE-2016-9962 FEDORA:FEDORA-2017-c2c2d1be16  View
801758 96782 CVE-2016-9962 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FINGBFMIXBG6B6ZWYH3TMRP5V3PDBNXR/  View
801759 96782 CVE-2016-9962 FEDORA:FEDORA-2017-dbc2b618eb  View
801760 96782 CVE-2016-9962 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQAXJMMLRU7DD2IMG47SR2K4BOFFG7FZ/  View
801761 96782 CVE-2016-9962 FEDORA:FEDORA-2017-fcd02e2c2d  View
801762 96782 CVE-2016-9962 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WUQ3MQNEL5IBZZLMLR72Q4YDCL2SCKRK/  View
801763 96782 CVE-2016-9962 GENTOO:GLSA-201701-34  View
801764 96782 CVE-2016-9962 URL:https://security.gentoo.org/glsa/201701-34  View
801765 96782 CVE-2016-9962 BID:95361  View

Related JVN