MAGEIA-2016-209 — Vulnetix

MAGEIA-2016-209 PUBLISHED

Updated docker packages fix security vulnerability: It was found that Docker would launch containers under the specified UID instead of a username. An attacker able to launch a container could use this flaw to escalate their privileges to root within the launched container (CVE-2016-3697).

Affected Products

Vendor	Product	Versions
Mageia	docker	1.9.1-1.1.mga5, 0

Timeline

May 29, 2016 CVE Updated
May 29, 2016 CVE Published

References

Updated docker package fixes CVE-2016-3697 advisory
Updated docker package fixes CVE-2016-3697 issue
Updated docker package fixes CVE-2016-3697 issue
Updated docker package fixes CVE-2016-3697 issue

Open in Interactive Console →