[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnnmVufl8P_4yBbF69WEx4wbPj7esDcOJOaAQ8O45vRw":3,"g5a-risk:CVE-2016-3697":162},{"success":4,"data":5,"meta":160},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":54,"references":55,"referencesCount":103,"weaknesses":104,"weaknessesCount":108,"isActivelyExploited":109,"cisaInfo":26,"otxData":26,"relatedBlogPosts":110,"seoMetadata":111,"configurations":136,"relatedVendorCves":158,"notableEvents":159},"CVE-2016-3697","What is CVE-2016-3697?","libcontainer\u002Fuser\u002Fuser.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container.","libcontainer\u002Fuser\u002Fuser.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local ...","2016-06-01T20:59:06.137","2025-04-12T10:46:40.837",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":22,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00388,[38,38,38,38,38,38,38],"High",[42,46,50],{"vendor":43,"product":43,"version":44,"criteria":45,"vulnerable":4},"docker","*","cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":44,"criteria":49,"vulnerable":4},"linuxfoundation","runc","cpe:2.3:a:linuxfoundation:runc:*:*:*:*:*:*:*:*",{"vendor":51,"product":51,"version":52,"criteria":53,"vulnerable":4},"opensuse","13.2","cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",3,[56,62,66,69,74,77,80,83,87,89,91,93,95,97,99,101],{"url":57,"source":58,"tags":59},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2016-05\u002Fmsg00111.html","Opensuse",[60,61],"Mailing List","Third Party Advisory",{"url":63,"source":64,"tags":65},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-1034.html","Red Hat",[61],{"url":67,"source":64,"tags":68},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-2634.html",[61],{"url":70,"source":71,"tags":72},"https:\u002F\u002Fgithub.com\u002Fdocker\u002Fdocker\u002Fissues\u002F21436","GitHub",[73,61],"Patch",{"url":75,"source":71,"tags":76},"https:\u002F\u002Fgithub.com\u002Fopencontainers\u002Frunc\u002Fcommit\u002F69af385de62ea68e2e608335cffbb0f4aa3db091",[61],{"url":78,"source":71,"tags":79},"https:\u002F\u002Fgithub.com\u002Fopencontainers\u002Frunc\u002Fpull\u002F708",[61],{"url":81,"source":71,"tags":82},"https:\u002F\u002Fgithub.com\u002Fopencontainers\u002Frunc\u002Freleases\u002Ftag\u002Fv0.1.0",[73,61],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201612-28","Gentoo",[61],{"url":57,"source":58,"tags":88},[60,61],{"url":63,"source":64,"tags":90},[61],{"url":67,"source":64,"tags":92},[61],{"url":70,"source":71,"tags":94},[73,61],{"url":75,"source":71,"tags":96},[61],{"url":78,"source":71,"tags":98},[61],{"url":81,"source":71,"tags":100},[73,61],{"url":84,"source":85,"tags":102},[61],16,[105],{"id":106,"name":106,"description":107},"Unknown","CWE-264",1,false,[],{"title":112,"metaDescription":113,"keywords":114,"canonicalUrl":115,"structuredData":116},"What is CVE-2016-3697? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-3697, a high severity cyber security vulnerability from 2016. libcontainer\u002Fuser\u002Fuser.go in runC before 0.1.0, as used in D...","CVE-2016-3697, CVE-2016-3697 vulnerability, CVE-2016-3697 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, docker security, linuxfoundation security, opensuse security, docker vulnerability, runc vulnerability, opensuse vulnerability","\u002Fwhat-is\u002Fcve-2016-3697",{"@context":117,"@type":118,"headline":112,"description":113,"datePublished":10,"dateModified":11,"author":119,"publisher":123,"about":127,"mainEntityOfPage":131,"articleSection":134,"keywords":135},"https:\u002F\u002Fschema.org","TechArticle",{"@type":120,"name":121,"url":122},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":120,"name":121,"url":122,"logo":124},{"@type":125,"url":126},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":128,"name":6,"description":129,"additionalType":130},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":132,"@id":133},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-3697","Cybersecurity","CVE-2016-3697, CVE-2016-3697 vulnerability, CVE-2016-3697 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[137,145,152],{"Operator":26,"Negate":26,"Nodes":138},[139],{"Operator":140,"Negate":26,"CPEMatch":141},"OR",[142],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":143,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":144},"F8698BF1-AB4E-4AF8-89DE-A398CBD11176","1.11.1",{"Operator":26,"Negate":26,"Nodes":146},[147],{"Operator":140,"Negate":26,"CPEMatch":148},[149],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":150,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":151},"B7483C33-6AB0-4C35-BCAF-A80193AB8723","0.0.9",{"Operator":26,"Negate":26,"Nodes":153},[154],{"Operator":140,"Negate":26,"CPEMatch":155},[156],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":157,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"03117DF1-3BEC-4B8D-AD63-DBBDB2126081",[],[],{"lastModified":11,"cacheTime":161,"version":32},1792375217176,{"score":163,"band":164,"action":165,"scoredAt":166},46,"Medium","Plan remediation","2026-10-17T07:57:35.757002+00:00"]