CVE-2016-8867

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-8867
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-8867.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-8867
Downstream
openSUSE (2)
RHSA (1)
SUSE (3)
Related
openSUSE (2)
SUSE (3)
Published
2016-10-28T15:59:14Z
Modified
2026-10-16T02:45:08Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:docker:docker:1.12.2:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.12.2"
                        },
                        {
                            "last_affected": "1.12.2"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "docker:docker"
        }
    ]
}
References

Affected packages

Git / github.com/docker-archive/engine

Affected ranges

Type
GIT
Repo
https://github.com/docker-archive/engine
Events
Introduced
bb80604a0b200140a440675348c848a137a1b2e2
Last Affected
bb80604a0b200140a440675348c848a137a1b2e2
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:docker:docker:1.12.2:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.12.2"
                },
                {
                    "last_affected": "1.12.2"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

1.*
1.12.2
v1.*
v1.12.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-8867.json"

Git / github.com/moby/moby

Affected ranges

Type
GIT
Repo
https://github.com/moby/moby
Events
Introduced
bb80604a0b200140a440675348c848a137a1b2e2
Last Affected
bb80604a0b200140a440675348c848a137a1b2e2
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:docker:docker:1.12.2:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.12.2"
                },
                {
                    "last_affected": "1.12.2"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

1.*
1.12.2
v1.*
v1.12.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-8867.json"