Summary
generated automatically from NVD dataCVE-2016-8579 affects docker2aci, a tool from the docker2aci project, in versions up to and including 0.12.3. When it processes local images whose dependency chain is cyclic, it enters an infinite loop, a problem classified as improper input validation (CWE-20). The consequence is a limited availability impact, and the flaw is rated 4.0 (MEDIUM) under CVSS v3.0 with a local attack vector and no privileges or user interaction required.
NVD description
docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.
EPSS · FIRST.org
0.36%probability of exploitation in the next 30 days
Higher than 29% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-30, recomputed daily by FIRST.org.
CVSS v3.0 Score
Information
- Published
- 28 oct. 2016
- Updated
- 17 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (4)
- http://www.securityfocus.com/bid/93560Third Party AdvisoryVDB Entry
- https://github.com/appc/docker2aci/issues/203Issue TrackingPatchThird Party Advisory
- http://www.securityfocus.com/bid/93560Third Party AdvisoryVDB Entry
- https://github.com/appc/docker2aci/issues/203Issue TrackingPatchThird Party Advisory
Similar CVEs
Other vulnerabilities of type CWE-20
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.