Lucene search
GoogleOSV:GO-2021-0070HistoryApr 14, 2021 - 8:04 p.m.
Privilege escalation in github.com/opencontainers/runc
2021-04-1420:04:52
Google
osv.dev
12
GetExecUser in the github.com/opencontainers/runc/libcontainer/user package will improperly interpret numeric UIDs as usernames. If the method is used without verifying that usernames are formatted as expected, it may allow a user to gain unexpected privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/opencontainers/runc | lt | 0.1.0 |
Related
redhat
redhat
(RHSA-2016:2634) Moderate: docker security and bug fix update
2016-11-03 16:46:17
(RHSA-2016:1034) Moderate: docker security, bug fix, and enhancement update
2016-05-12 14:58:50
fedora
fedora
[SECURITY] Fedora 24 Update: docker-1.10.3-15.gitf476348.fc24
2016-06-18 19:40:15
[SECURITY] Fedora 23 Update: docker-1.10.3-24.gitf476348.fc23
2016-06-10 02:28:43
mageia
mageia
Updated docker package fixes CVE-2016-3697
2016-05-29 16:55:26
nvd
nvd
CVE-2016-3697
2016-06-01 20:59:06
CVE-2018-9862
2018-04-09 16:29:00
github
github
Privilege Elevation in runc
2021-12-20 18:21:34
debiancve
debiancve
CVE-2016-3697
2016-06-01 20:59:06
nessus
nessus
Fedora 23 : 2:docker (2016-6a0d540088)
2016-07-14 00:00:00
EulerOS 2.0 SP1 : docker (EulerOS-SA-2016-1016)
2017-05-01 00:00:00
RHEL 7 : docker (RHSA-2016:2634)
2016-11-07 00:00:00
oraclelinux
oraclelinux
docker-engine security update
2016-05-20 00:00:00
openvas
openvas
Fedora Update for docker FEDORA-2016-6a0d540088
2016-06-11 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:1159-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2016-0209)
2022-01-28 00:00:00
veracode
veracode
Privilege Escalation
2019-01-15 09:11:32
Privilege Escalation
2017-05-03 06:50:10
prion
prion
Default credentials
2016-06-01 20:59:00
Code injection
2018-04-09 16:29:00
gentoo
gentoo
Docker: Privilege escalation
2016-12-11 00:00:00
ubuntucve
ubuntucve
CVE-2016-3697
2016-06-01 00:00:00
osv
osv
Privilege Elevation in runc
2021-12-20 18:21:34
CVE-2018-9862
2018-04-09 16:29:00
cbl_mariner
cbl_mariner
CVE-2016-3697 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
cvelist
cvelist
CVE-2016-3697
2016-06-01 20:00:00
CVE-2018-9862
2018-04-09 16:00:00
cve
cve
CVE-2016-3697
2016-06-01 20:59:06
CVE-2018-9862
2018-04-09 16:29:00
kaspersky
kaspersky
KLA10820 Privilege escalation vulnerability in Docker
2016-06-01 00:00:00
ibm
ibm