CVE-2016-9962: Race Condition
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9962?
CVE-2016-9962 has a high severity rating due to its potential to enable container escapes.
How do I fix CVE-2016-9962?
To fix CVE-2016-9962, it is recommended to upgrade Docker to a version later than 1.12.6.
Which versions of Docker are affected by CVE-2016-9962?
CVE-2016-9962 affects Docker versions between 1.11.0 and 1.12.6 inclusive.
Can CVE-2016-9962 lead to security breaches?
Yes, CVE-2016-9962 can lead to security breaches by allowing container processes to be accessed by the main root processes.
What is the impact of CVE-2016-9962 on container security?
CVE-2016-9962 impacts container security by potentially allowing unauthorized access to file descriptors and facilitating container escapes.