| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/opencontainers/runc | < 0.1.0 | 0.1.0 |
| docker | ≤ 1.11.1 | |
| runc | ≤ 0.0.9 |
libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free