RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade docker | Aug 30, 2017 | Jan 31, 2017 |
| Amazon_linux | — | Upgrade docker | Jan 11, 2017 | Jan 10, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 31, 2017 |
| Centos_linux | — | Upgrade docker-client-latestUpgrade docker-rhel-push-pluginUpgrade docker-logrotateUpgrade docker-clientUpgrade docker-v1.10-migratorUpgrade docker-latestUpgrade container-selinuxUpgrade docker-latest-v1.10-migratorUpgrade runcUpgrade docker-latest-logrotateUpgrade dockerUpgrade docker-commonUpgrade docker-novolume-pluginUpgrade docker-lvm-plugin | Aug 28, 2019 | Jan 31, 2017 |
| Debian | — | Upgrade runcUpgrade docker.io | Jul 30, 2024 | Jan 31, 2017 |
| Docker | — | Upgrade to Docker v1.12.6 | May 4, 2017 | Jan 31, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Oct 30, 2017 | Jan 31, 2017 |
| Oracle_linux | — | Upgrade docker-engineUpgrade docker-engine-selinux | Jan 14, 2017 | Jan 11, 2017 |
| Redhat_linux | — | Upgrade docker-commonUpgrade docker-rhel-push-pluginUpgrade runcUpgrade docker-v1.10-migratorUpgrade docker-latestUpgrade container-selinuxUpgrade docker-clientUpgrade docker-lvm-pluginUpgrade docker-latest-v1.10-migratorUpgrade docker-latest-logrotateUpgrade docker-novolume-pluginUpgrade docker-client-latestUpgrade dockerUpgrade docker-logrotate | Jan 20, 2017 | Jan 10, 2017 |
| Suse | — | Upgrade containerdUpgrade runcUpgrade docker-libnetworkUpgrade docker-bash-completionUpgrade dockerUpgrade docker-runcUpgrade docker-fish-completion | Feb 1, 2017 | Jan 10, 2017 |
| Ubuntu | — | Upgrade docker.ioUpgrade runc | Nov 19, 2024 | Jan 31, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub