CVE-2016-8867
Fixed in a distro release EPSS 3%
Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.
Products: docker
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras other 7 | docker | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-client | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-common | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-debuginfo | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-logrotate | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-lvm-plugin | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-novolume-plugin | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-rhel-push-plugin | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat rhel extras other 7 | docker-v1.10-migrator | 2:1.13.1-162.git64e9980.el7_8 |
| SUSE Enterprise Storage 7.1 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 12 | containerd | 0.2.4+gitr565_0366d7e-9.1 |
| SUSE Linux Enterprise Module for Containers 12 | docker | 1.12.3-81.2 |
| SUSE Linux Enterprise Module for Containers 12 | rubygem-docker-api | 1.31.0-11.2 |
| SUSE Linux Enterprise Module for Containers 12 | rubygem-excon | 0.52.0-9.1 |
| SUSE Linux Enterprise Module for Containers 12 | runc | 0.1.1+gitr2816_02f8fa7-9.1 |
| SUSE Linux Enterprise Module for Containers 15 SP6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Module for Containers 15 SP7 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | docker-stable | 24.0.9_ce-1.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| SUSE OpenStack Cloud 6 | containerd | 0.2.4+gitr565_0366d7e-9.1 |
| SUSE OpenStack Cloud 6 | docker | 1.12.3-81.2 |
| SUSE OpenStack Cloud 6 | runc | 0.1.1+gitr2816_02f8fa7-9.1 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.25.1 |
| openSUSE Tumbleweed | docker | 1.12.3-4.1 |
| openSUSE Tumbleweed | docker-stable | 24.0.9_ce-15.1 |