CVSS 3.0
6.4 mediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2016-9962
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
- CWE
- CWE-362
- Published
- Modified
- Record from
- the NVD, synced
Affected
- docker:docker
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-gp4j-w3vj-7299 | Go | github.com/opencontainers/runc | <1.0.0-rc3 | 1.0.0-rc3 |
| GO-2022-0835 | Go | github.com/opencontainers/runc | <1.0.0-rc3 | 1.0.0-rc3 |