LXC vulnerability

2014-02-1200:00:00

ubuntu.com

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 13.10

Packages

lxc - Linux Containers userspace tools

Details

Florian Sagar discovered that the LXC sshd template set incorrect mount
permissions. An attacker could possibly use this flaw to cause privilege
escalation on the host.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchlxc-templates< 1.0.0~alpha1-0ubuntu14.1UNKNOWN
Ubuntu13.10noarchliblxc0< 1.0.0~alpha1-0ubuntu14.1UNKNOWN
Ubuntu13.10noarchlxc< 1.0.0~alpha1-0ubuntu14.1UNKNOWN
Ubuntu13.10noarchlxc-dbg< 1.0.0~alpha1-0ubuntu14.1UNKNOWN
Ubuntu13.10noarchlxc-dev< 1.0.0~alpha1-0ubuntu14.1UNKNOWN
Ubuntu13.10noarchpython3-lxc< 1.0.0~alpha1-0ubuntu14.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.10	noarch	lxc-templates	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN
Ubuntu	13.10	noarch	liblxc0	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN
Ubuntu	13.10	noarch	lxc	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN
Ubuntu	13.10	noarch	lxc-dbg	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN
Ubuntu	13.10	noarch	lxc-dev	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN
Ubuntu	13.10	noarch	python3-lxc	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN