CVE-2016-8867: High severity Docker docker vulnerability
Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8867?
CVE-2016-8867 has a high severity rating due to its potential to allow unauthorized access to container files and mounted volumes.
How do I fix CVE-2016-8867?
To fix CVE-2016-8867, upgrade Docker Engine to a version later than 1.12.2 that addresses the ambient capabilities issue.
What are the potential impacts of CVE-2016-8867?
The potential impacts of CVE-2016-8867 include unauthorized access to sensitive data within containers and compromised host security.
Who is affected by CVE-2016-8867?
CVE-2016-8867 affects users of Docker Engine version 1.12.2.
What is the nature of the vulnerability in CVE-2016-8867?
CVE-2016-8867 is a vulnerability that misconfigures capability policies, allowing malicious Docker images to bypass user permissions.