CVE-2016-8579: docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Security readout for executives and security teams

CVE-2016-8579 is a denial-of-service style issue in docker2aci. Versions up to 0.12.3 can enter an infinite loop when processing a local image with a cyclic dependency chain. The business impact is build or conversion pipeline disruption, not direct data theft, based on the supplied sources. Exposure is most likely in legacy environments, CI jobs, or migration tooling that still run docker2aci against local Docker images. Organizations not using docker2aci, or not processing local images through it, are unlikely to be exposed. Treat as low immediate urgency unless docker2aci remains in a production build or migration path. Prioritize inventory and containment over emergency response because the supplied evidence shows denial of service risk, not active exploitation or data compromise. Mitigation focus: Inventory build and conversion systems for docker2aci usage.; Check whether any installed docker2aci version is 0.12.3 or older.; Review the upstream issue for vendor-stated fixes or workarounds..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.