CVE-2016-8579

Denial of Service in docker2aci

4.0 MediumFix available

docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: Low

Exploit likelihood

0.36%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 4.0

docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Record: CVE-2016-8579
CVSS 3.0: 4.0 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-20, CWE-399
Updated: 2026-11-02

CVE List No score

docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Record: CVE-2016-8579
Updated: 2026-11-02

EUVDEUVD-2022-1013 No score

docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Record: EUVD-2022-1013
Updated: 2026-11-03

GitHub AdvisoriesGHSA-gfh2-7jg5-653p 4.0

Denial of Service in docker2aci

docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Record: GHSA-gfh2-7jg5-653p
CVSS 3.0: 4.0 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-835
Updated: 2026-11-02

OSV 4.0

docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Record: CVE-2016-8579
CVSS 3.0: 4.0 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVDEBIAN-CVE-2016-8579 4.0

docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Record: DEBIAN-CVE-2016-8579
CVSS 3.0: 4.0 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVGHSA-gfh2-7jg5-653p 4.0

Denial of Service in docker2aci

docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Record: GHSA-gfh2-7jg5-653p
CVSS 3.0: 4.0 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-835
Updated: 2026-11-02

OSVUBUNTU-CVE-2016-8579 4.0

docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

Record: UBUNTU-CVE-2016-8579
CVSS 3.0: 4.0 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVGO-2022-0833 No score

Denial of Service in docker2aci in github.com/appc/docker2aci

Denial of Service in docker2aci in github.com/appc/docker2aci

Record: GO-2022-0833
Updated: 2026-11-02

Affected products

docker2aci project docker2aci

Affected packages

Affected packages
Package	Affected	Fixed
`github.com/appc/docker2aci` Go	before 0.13.0	0.13.0
`golang-github-appc-docker2aci` Debian:11	before 0.12.3+dfsg-2	0.12.3+dfsg-2
`golang-github-appc-docker2aci` Ubuntu:18.04:LTS	All versions, plus listed versions 0.14.0+dfsg-2	None known
`golang-github-appc-docker2aci` Ubuntu:20.04:LTS	All versions, plus listed versions 0.17.2+dfsg-2	None known
`golang-github-appc-docker2aci` Ubuntu:22.04:LTS	All versions, plus listed versions 0.17.2+dfsg-2.1	None known

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-8579 is a medium vulnerability (CVSS 4.0) in Docker2aci Project Docker2aci, published October 28, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in github.com/appc/docker2aci 0.13.0.

References

Show 5 moreShow less