CVE-2016-9962: docker
Vulnerability summary
CVE-2016-9962 is a medium (CVSS 6.4) vulnerability in docker. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 35.4% of scored vulnerabilities.
Not severe (CVSS 6.4, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 8 · Related 10Timeline
- 31-01-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
CVSS metrics
8 scores · 7 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated6.4MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated6.4MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- OSV · WolfiEcosystem advisory · calculated6.4MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- OSV · GoEcosystem advisory · calculated6.4MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated6.4MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.41%
Chance of exploitation in the next 30 days
Percentile
35%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.41% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat14 products
- container-selinux< 2:1.12.5-14.el7
- docker< 2:1.12.5-14.el7
- docker-client< 2:1.12.5-14.el7
- docker-client-latest< 0:1.12.5-14.el7
- docker-common< 2:1.12.5-14.el7
Suse6 products
- containerd&distro=SUSE Linux Enterprise Module for Containers 12< 0.2.5+gitr569_2a5e70c-15.3
- containerd&distro=SUSE OpenStack Cloud 6< 0.2.5+gitr569_2a5e70c-15.3
- docker&distro=SUSE Linux Enterprise Module for Containers 12< 1.12.6-87.2
- docker&distro=SUSE OpenStack Cloud 6< 1.12.6-87.2
- runc&distro=SUSE Linux Enterprise Module for Containers 12< 0.1.1+gitr2819_50a19c6-15.2
Chainguard2 products
- runcAll versions (No fix recorded)
- runc-docAll versions (No fix recorded)
Debian2 products
- docker.io< 1.13.1~ds1-2
- runc< 0.1.1+dfsg1-2
Ubuntu2 products
- docker.io< 1.13.1-0ubuntu1~16.04.2
- runc< 1.0.0~rc2+docker1.13.1-0ubuntu1
Wolfi2 products
- runcAll versions (No fix recorded)
- runc-docAll versions (No fix recorded)
Docker1 product
- docker≥ 1.11.0, < 1.12.6
Github.com/opencontainers1 product
- runc< 1.0.0-rc3
Mageia1 product
- docker< 1.9.1-1.2.mga5
9 vendors · 31 products
References
74 links- seclists.org/fulldisclosure/2017/Jan/29Mailing ListX Refsource FULLDISCThird Party AdvisoryAdvisoryWEB
- github.com/opencontainers/runc/commit/50a19c6ff828c58e5dab13830bd3dacde268afe5X Refsource CONFIRMPatchThird Party AdvisoryFIXWEB
Show all 74 references
- access.redhat.com/security/vulnerabilities/cve-2016-9962X Refsource CONFIRMThird Party AdvisoryARTICLEAdvisoryWEB
- seclists.org/fulldisclosure/2017/Jan/21Mailing ListX Refsource FULLDISCThird Party AdvisoryAdvisoryWEB
