Skip to content
OpenAdvisories
High RHSA-2016:2634 1 CVE

Red Hat Security Advisory: docker security and bug fix update

Published Sep 13, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker 0:1.10.3-57.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-common 0:1.10.3-57.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-logrotate 0:1.10.3-57.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-lvm-plugin 0:1.10.3-57.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-novolume-plugin 0:1.10.3-57.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-rhel-push-plugin 0:1.10.3-57.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-selinux 0:1.10.3-57.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-v1.10-migrator 0:1.10.3-57.el7

Vulnerabilities 1

  • High 7.8
    CVE-2016-3697

    Privilege Elevation in runc

    libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container.

    github.com/opencontainers/runc runc Debian Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1303123
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1329450
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1330141
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1335951
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1336857
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1346185
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1357121
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1358819
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1362611
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1370935
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1374265
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1385641
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2634.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-3697
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-3697
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-3697