{"id":"CVE-2016-9962","published":"2017-01-31T22:00:00Z","modified":"2024-08-06T03:07:31Z","title":"RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container","vendor":null,"product":null,"tier":"tail","description":{"text":"RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container.  This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00412,"percentile":0.35437,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/95361","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://github.com/docker/docker/releases/tag/v1.12.6","tags":["x_refsource_CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0116.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://seclists.org/fulldisclosure/2017/Jan/29","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WUQ3MQNEL5IBZZLMLR72Q4YDCL2SCKRK/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1012568#c6","tags":["x_refsource_CONFIRM"]},{"url":"https://security.gentoo.org/glsa/201701-34","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0123.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://github.com/opencontainers/runc/commit/50a19c6ff828c58e5dab13830bd3dacde268afe5","tags":["x_refsource_CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0127.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FINGBFMIXBG6B6ZWYH3TMRP5V3PDBNXR/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://access.redhat.com/security/vulnerabilities/cve-2016-9962","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAXJMMLRU7DD2IMG47SR2K4BOFFG7FZ/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UVM7FCOQMPKOFLDTUYSS4ES76DDM56VP/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://www.securityfocus.com/archive/1/540001/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://seclists.org/fulldisclosure/2017/Jan/21","tags":["mailing-list","x_refsource_FULLDISC"]}],"priority":{"score":7.1,"factors":[{"name":"EPSS percentile","points":7.09}]},"affected":[{"ecosystem":"Go","package":"github.com/opencontainers/runc","vulnerableRanges":["<1.0.0-rc3"],"patched":["1.0.0-rc3"],"from":["GHSA-gp4j-w3vj-7299","GO-2022-0835"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-2523","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-opencontainers-runc-cve-2016-9962","children":[{"from":"CVE-2016-9962","to":"CVE-2020-14300","relation":"regression","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"regression","quote":"One of the fixes regressed in that update was the fix for CVE-2016-9962, that was previously corrected in the docker packages in Red Hat Enterprise Linux 7 Extras via RHSA-2017:0116 (https://access.redhat.com/errata/RHSA-2017:0116).","from":"CVE.org","in":"CVE-2020-14300"}]},{"from":"CVE-2016-9962","to":"CVE-2019-5736","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["libcontainer/nsenter/nsexec.c"],"commits":["https://github.com/opencontainers/runc/commit/50a19c6ff828c58e5dab13830bd3dacde268afe5","https://github.com/opencontainers/runc/commit/5d93fed3d27f1e2bab58bad13b180a7a81d0b378","https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d","https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b"],"basis":"shared function","functions":["nsexec"]}]},{"from":"CVE-2016-9962","to":"CVE-2021-43784","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["libcontainer/init_linux.go","libcontainer/nsenter/nsexec.c","libcontainer/standard_init_linux.go"],"commits":["https://github.com/opencontainers/runc/commit/50a19c6ff828c58e5dab13830bd3dacde268afe5","https://github.com/opencontainers/runc/commit/5d93fed3d27f1e2bab58bad13b180a7a81d0b378","https://github.com/opencontainers/runc/commit/9c444070ec7bb83995dbc0185da68284da71c554","https://github.com/opencontainers/runc/commit/d72d057ba794164c3cce9451a00b72a78b25e1ae"],"basis":"shared function","functions":["Init","newContainerInit","nsexec"]}]},{"from":"CVE-2016-9962","to":"CVE-2024-21626","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["libcontainer/init_linux.go","libcontainer/setns_init_linux.go","libcontainer/standard_init_linux.go"],"commits":["https://github.com/opencontainers/runc/commit/50a19c6ff828c58e5dab13830bd3dacde268afe5","https://github.com/opencontainers/runc/commit/5d93fed3d27f1e2bab58bad13b180a7a81d0b378","https://github.com/opencontainers/runc/commit/02120488a4c0fc487d1ed2867e901eeed7ce8ecf"],"basis":"shared function","functions":["Init"]}]},{"from":"CVE-2016-9962","to":"CVE-2025-52881","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["libcontainer/standard_init_linux.go"],"commits":["https://github.com/opencontainers/runc/commit/50a19c6ff828c58e5dab13830bd3dacde268afe5","https://github.com/opencontainers/runc/commit/5d93fed3d27f1e2bab58bad13b180a7a81d0b378","https://github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480","https://github.com/opencontainers/runc/commit/ff6fe1324663538167eca8b3d3eec61e1bd4fa51"],"basis":"shared function","functions":["Init"]}]}]}}