Skip to content
OpenAdvisories
Medium RHSA-2017:0127 1 CVE

Red Hat Security Advisory: runc security and bug fix update

Published Sep 13, 2024 · Updated May 13, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 runc 0:1.0.0-1.rc2.el7

Vulnerabilities 1

  • Medium 6.4
    CVE-2016-9962

    Information Exposure in RunC

    RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization a…

    docker.io docker.io runc github.com/opencontainers/runc Debian Ubuntu Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1409531
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0127.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9962
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9962
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9962
  • article
    https://access.redhat.com/security/vulnerabilities/cve-2016-9962