RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
CVSS Details
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade docker | Aug 30, 2017 | Jan 31, 2017 |
| Amazon_linux | — | Upgrade docker | Jan 11, 2017 | Jan 10, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 31, 2017 |
| Centos_linux | — | Upgrade docker-rhel-push-pluginUpgrade docker-clientUpgrade docker-client-latestUpgrade docker-latestUpgrade container-selinuxUpgrade docker-v1.10-migratorUpgrade docker-logrotateUpgrade runcUpgrade docker-lvm-pluginUpgrade docker-latest-logrotateUpgrade docker-latest-v1.10-migratorUpgrade docker-commonUpgrade docker-novolume-pluginUpgrade docker | Aug 28, 2019 | Jan 31, 2017 |
| Debian | — | Upgrade runcUpgrade docker.io | Jul 30, 2024 | Jan 31, 2017 |
| Docker | — | Upgrade to Docker v1.12.6 | May 4, 2017 | Jan 31, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Oct 30, 2017 | Jan 31, 2017 |
| Oracle_linux | — | Upgrade docker-engine-selinuxUpgrade docker-engine | Jan 14, 2017 | Jan 11, 2017 |
| Redhat_linux | — | Upgrade docker-logrotateUpgrade docker-novolume-pluginUpgrade dockerUpgrade docker-lvm-pluginUpgrade docker-client-latestUpgrade docker-latest-logrotateUpgrade docker-latest-v1.10-migratorUpgrade docker-rhel-push-pluginUpgrade container-selinuxUpgrade docker-clientUpgrade docker-latestUpgrade runcUpgrade docker-commonUpgrade docker-v1.10-migrator | Jan 20, 2017 | Jan 10, 2017 |
| Suse | — | Upgrade dockerUpgrade docker-fish-completionUpgrade docker-runcUpgrade docker-bash-completionUpgrade containerdUpgrade runcUpgrade docker-libnetwork | Feb 1, 2017 | Jan 10, 2017 |
| Ubuntu | — | Upgrade docker.ioUpgrade runc | Nov 19, 2024 | Jan 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub