CVE-2016-6349 The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.
LowCVSS 3.3
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| projectatomic oci-register-machine | All versions | No fix listed |
References
- [oss-security] 20160726 Re: cve request: systemd-machined: information exposure for docker containers mailing-list third-party-advisory vdb-entry
- [oss-security] 20161013 Re: cve request: systemd-machined: information exposure for docker containers mailing-list third-party-advisory
- 92143 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com patch