CVE-2016-3697

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local…

published June 1, 2016

CVSS
—
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00388 · 31.5th percentile
Published
2016-06-01T20:00Z
EPSS history
Timeline
  • 01 JUN 20:00Z
    libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local…
    cvelistv5