CVE-2016-8649

2016-11-2300:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

0.004

Percentile

72.4%

JSON

lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker
inside of an unprivileged container to use an inherited file descriptor, of
the host’s /proc, to access the rest of the host’s filesystem via the
openat() family of syscalls.

Bugs

<https://launchpad.net/bugs/1639345>

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlxc< 1.0.8-0ubuntu0.4UNKNOWN
ubuntu16.04noarchlxc< 2.0.5-0ubuntu1~ubuntu16.04.3UNKNOWN
ubuntu16.10noarchlxc< 2.0.5-0ubuntu1.2UNKNOWN
ubuntu17.04noarchlxc< 2.0.5-0ubuntu4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	lxc	< 1.0.8-0ubuntu0.4	UNKNOWN
ubuntu	16.04	noarch	lxc	< 2.0.5-0ubuntu1~ubuntu16.04.3	UNKNOWN
ubuntu	16.10	noarch	lxc	< 2.0.5-0ubuntu1.2	UNKNOWN
ubuntu	17.04	noarch	lxc	< 2.0.5-0ubuntu4	UNKNOWN