Privilege escalation vulnerability in Docker

Описание

An improper treating of a numeric UID was found in Docker. By exploiting this vulnerability malicious users can escalate privileges. This vulnerability can be exploited locally via a numeric username in the password file.

---

Technical details

This vulnerability is related to libcontainer/user/user.go in runC.

Первичный источник обнаружения

Связанные продукты

• Docker

Список CVE

• CVE-2016-3697
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com