CVE-2016-3697: libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeri...

Security readout for executives and security teams

CVE-2016-3697 is an old container runtime privilege issue. runC, used by Docker, could mis-handle a numeric user ID as a possible username. A local user inside a container with a numeric username entry could gain elevated privileges. Evidence points to affected runC before 0.1.0 and Docker before 1.11.2. Exposure is most likely in legacy Docker or runC deployments, especially old Linux distribution packages from 2016 or earlier. Modern supported container stacks are less likely exposed, but backported vendor package versions must be checked against distro advisories. Treat this as a cleanup and legacy-risk item unless exposed systems are still running old container runtimes. Prioritize internet-facing or multi-tenant container hosts first because local privilege flaws can raise containment and isolation concerns. Mitigation focus: Upgrade runC to 0.1.0 or a vendor-fixed later package.; Upgrade Docker to 1.11.2 or a vendor-fixed later package.; Apply applicable Red Hat, SUSE, or Gentoo security updates..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.