RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
CVSS Details
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade docker | Aug 30, 2017 | Jan 31, 2017 |
| Amazon_linux | — | Upgrade docker | Jan 11, 2017 | Jan 10, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 31, 2017 |
| Centos_linux | — | Upgrade dockerUpgrade docker-latest-logrotateUpgrade runcUpgrade docker-commonUpgrade docker-novolume-pluginUpgrade docker-latest-v1.10-migratorUpgrade docker-lvm-pluginUpgrade docker-clientUpgrade docker-logrotateUpgrade container-selinuxUpgrade docker-client-latestUpgrade docker-rhel-push-pluginUpgrade docker-v1.10-migratorUpgrade docker-latest | Aug 28, 2019 | Jan 31, 2017 |
| Debian | — | Upgrade docker.ioUpgrade runc | Jul 30, 2024 | Jan 31, 2017 |
| Docker | — | Upgrade to Docker v1.12.6 | May 4, 2017 | Jan 31, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Oct 30, 2017 | Jan 31, 2017 |
| Oracle_linux | — | Upgrade docker-engineUpgrade docker-engine-selinux | Jan 14, 2017 | Jan 11, 2017 |
| Redhat_linux | — | Upgrade docker-clientUpgrade docker-latestUpgrade docker-commonUpgrade docker-v1.10-migratorUpgrade docker-rhel-push-pluginUpgrade container-selinuxUpgrade runcUpgrade dockerUpgrade docker-novolume-pluginUpgrade docker-latest-logrotateUpgrade docker-lvm-pluginUpgrade docker-client-latestUpgrade docker-logrotateUpgrade docker-latest-v1.10-migrator | Jan 20, 2017 | Jan 10, 2017 |
| Suse | — | Upgrade runcUpgrade docker-libnetworkUpgrade containerdUpgrade docker-bash-completionUpgrade dockerUpgrade docker-runcUpgrade docker-fish-completion | Feb 1, 2017 | Jan 10, 2017 |
| Ubuntu | — | Upgrade docker.ioUpgrade runc | Nov 19, 2024 | Jan 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub