Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade docker-logrotateUpgrade docker-clientUpgrade docker-commonUpgrade docker-novolume-pluginUpgrade docker-rhel-push-pluginUpgrade docker-v1.10-migratorUpgrade docker-debuginfoUpgrade dockerUpgrade docker-lvm-plugin | Jun 24, 2020 | Oct 28, 2016 |
| Docker | — | Upgrade to Docker v1.12.3 | May 4, 2017 | Oct 28, 2016 |
| Oracle_linux | — | Upgrade docker-engine-selinuxUpgrade docker-engine | Jan 14, 2017 | Oct 28, 2016 |
| Redhat_linux | — | Upgrade docker-rhel-push-pluginUpgrade docker-commonUpgrade docker-clientUpgrade dockerUpgrade docker-novolume-pluginUpgrade docker-v1.10-migratorUpgrade docker-logrotateUpgrade docker-lvm-pluginUpgrade docker-debuginfo | Jun 24, 2020 | Oct 28, 2016 |
| Suse | — | Upgrade docker-fish-completionUpgrade docker-bash-completionUpgrade runcUpgrade containerdUpgrade dockerUpgrade ruby2.1-rubygem-docker-apiUpgrade ruby2.1-rubygem-excon | Dec 5, 2016 | Oct 28, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 28, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub