Description
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | docker.io | 1.13.1~ds1-2 | — |
| Debian 14 | runc | 0.1.1+dfsg1-2 | — |
| Debian 13 | docker.io | 1.13.1~ds1-2 | — |
| Debian 13 | runc | 0.1.1+dfsg1-2 | — |
| Debian 12 | docker.io | 1.13.1~ds1-2 | — |
| Debian 12 | runc | 0.1.1+dfsg1-2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | runc | 1.0.0~rc2+docker1.13.1-0ubuntu1 | — |
| Ubuntu 16.04 LTS | docker.io | 1.13.1-0ubuntu1~16.04.2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Other 7 | docker +8 | 2:1.12.5-14.el7 | RHSA-2017:0116 |
| Red Hat Rhel Extras Other 7 | docker-latest +3 | 1.12.5-14.el7 | RHSA-2017:0123 |
| Red Hat Rhel Extras Other 7 | runc | 1.0.0-1.rc2.el7 | RHSA-2017:0127 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES 15 SP6 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | docker-stable | 24.0.9_ce-1.20.1 | SUSE-SU-2025:03540-1 |
| SLES 12 | containerd | 0.2.5+gitr569_2a5e70c-15.3 | SUSE-SU-2019:0573-1, SUSE-SU-2017:1964-1 |
| SLES 12 | docker | 1.12.6-87.2 | SUSE-SU-2019:0573-1, SUSE-SU-2017:1964-1 |
| SLES 12 | docker-runc | 1.0.0rc6+gitr3748_96ec2177ae84-1.17.2 | SUSE-SU-2019:0573-1 |
| SLES 12 | golang-github-docker-libnetwork | 0.7.0.1+gitr2711_2cfbf9b1f981-16.2 | SUSE-SU-2019:0573-1 |
| SLES 12 | runc | 0.1.1+gitr2819_50a19c6-15.2 | SUSE-SU-2017:1964-1 |
| SLES for SAP 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES for SAP 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES for SAP 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLE HPC 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLE HPC 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLE HPC 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SUSE OpenStack Cloud 6 | containerd | 0.2.5+gitr569_2a5e70c-15.3 | SUSE-SU-2019:0573-1, SUSE-SU-2017:1964-1 |
| SUSE OpenStack Cloud 6 | docker | 1.12.6-87.2 | SUSE-SU-2019:0573-1, SUSE-SU-2017:1964-1 |
| SUSE OpenStack Cloud 6 | docker-runc | 1.0.0rc6+gitr3748_96ec2177ae84-1.17.2 | SUSE-SU-2019:0573-1 |
| SUSE OpenStack Cloud 6 | golang-github-docker-libnetwork | 0.7.0.1+gitr2711_2cfbf9b1f981-16.2 | SUSE-SU-2019:0573-1 |
| SUSE OpenStack Cloud 6 | runc | 0.1.1+gitr2819_50a19c6-15.2 | SUSE-SU-2017:1964-1 |
| SUSE Enterprise Storage 7.1 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | containerd | 1.4.8-2.2 | openSUSE-SU-2024:10693-1 |
| openSUSE Tumbleweed | docker | 20.10.6_ce-2.1 | openSUSE-SU-2024:10722-1 |
| openSUSE Tumbleweed | docker-stable | 24.0.9_ce-15.1 | openSUSE-SU-2025:15589-1 |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250807T150727-1.1 | openSUSE-SU-2025:15424-1 |
| openSUSE Tumbleweed | runc | 1.0.2-1.2 | openSUSE-SU-2024:11358-1 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | docker-engine +1 | 1.12.6-1.0.1.el7 | ELSA-2017-3511 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/opencontainers/runc | < 1.0.0-rc3 | 1.0.0-rc3 | GHSA-gp4j-w3vj-7299 |
Advisories 14
- RHSA-2017:0123 Red Hat Security Advisory: docker-latest security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · May 13, 2026
- RHSA-2017:0127 Red Hat Security Advisory: runc security and bug fix update Red Hat Security Advisories (RHSA) · May 13, 2026
- RHSA-2017:0116 Red Hat Security Advisory: docker security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · May 13, 2026
- openSUSE-SU-2025:15589-1 docker-stable-24.0.9_ce-15.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15424-1 govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03545-1 Security update for docker-stable SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2019:0573-1 Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11358-1 runc-1.0.2-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10693-1 containerd-1.4.8-2.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10722-1 docker-20.10.6_ce-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:1964-1 Security update for containerd, docker, runc SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:03540-1 Security update for docker-stable SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-2173 docker: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Oct 12, 2025
- ELSA-2017-3511 Important: docker-engine docker-engine-selinux security and bugfix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 13, 2017
References
- 95361 vdb-entry
- https://github.com/docker/docker/releases/tag/v1.12.6
- RHSA-2017:0116 vendor-advisory
- 20170111 Re: [oss-security] Docker 1.12.6 - Security Advisory mailing-list
- FEDORA-2017-fcd02e2c2d vendor-advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1012568#c6
- GLSA-201701-34 vendor-advisory
- RHSA-2017:0123 vendor-advisory
- https://github.com/opencontainers/runc/commit/50a19c6ff828c58e5dab13830bd3dacde268afe5
- RHSA-2017:0127 vendor-advisory
- FEDORA-2017-c2c2d1be16 vendor-advisory
- https://access.redhat.com/security/vulnerabilities/cve-2016-9962
- FEDORA-2017-dbc2b618eb vendor-advisory
- FEDORA-2017-0200646669 vendor-advisory
- 20170111 Re: [oss-security] Docker 1.12.6 - Security Advisory mailing-list
- 20170110 Docker 1.12.6 - Security Advisory mailing-list