CVE-2016-3697
Fixed in a distro release EPSS <1%
libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container.
Products: docker, linuxfoundation runc, opensuse
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/opencontainers/runc | 0.1.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | runc | 0 |
| Chainguard | runc-doc | 0 |
| Debian 12 | runc | 0.1.0+dfsg-1 |
| Debian 13 | runc | 0.1.0+dfsg-1 |
| Debian 14 | runc | 0.1.0+dfsg-1 |
| Red Hat rhel extras other 7 | docker | 0:1.10.3-57.el7 |
| Red Hat rhel extras other 7 | docker | 0:1.9.1-40.el7 |
| Red Hat rhel extras other 7 | docker-common | 0:1.10.3-57.el7 |
| Red Hat rhel extras other 7 | docker-common | 0:1.9.1-40.el7 |
| Red Hat rhel extras other 7 | docker-forward-journald | 0:1.9.1-40.el7 |
| Red Hat rhel extras other 7 | docker-logrotate | 0:1.10.3-57.el7 |
| Red Hat rhel extras other 7 | docker-logrotate | 0:1.9.1-40.el7 |
| Red Hat rhel extras other 7 | docker-lvm-plugin | 0:1.10.3-57.el7 |
| Red Hat rhel extras other 7 | docker-novolume-plugin | 0:1.10.3-57.el7 |
| Red Hat rhel extras other 7 | docker-rhel-push-plugin | 0:1.10.3-57.el7 |
| Red Hat rhel extras other 7 | docker-selinux | 0:1.10.3-57.el7 |
| Red Hat rhel extras other 7 | docker-selinux | 0:1.9.1-40.el7 |
| Red Hat rhel extras other 7 | docker-v1.10-migrator | 0:1.10.3-57.el7 |
| SUSE Enterprise Storage 7.1 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 12 | docker | 1.10.3-66.1 |
| SUSE Linux Enterprise Module for Containers 15 SP6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 15 SP7 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE OpenStack Cloud 6 | docker | 1.10.3-66.1 |
| Wolfi | runc | 0 |
| Wolfi | runc-doc | 0 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| openSUSE Tumbleweed | docker | 1.12.3-4.1 |
| openSUSE Tumbleweed | docker-stable | 24.0.9_ce-15.1 |