Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2015-8222
cve-2015-8222
lxd package
ubuntu
systemd
unit file
nvd
security vulnerability
local users
privileges
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world-readable permissions for /var/lib/lxd/unix.socket, which allows local users to gain privileges via unspecified vectors.
Affected configurations
Node
canonicalubuntu_linuxMatch15.10
| CPE | Name | Operator | Version |
|---|---|---|---|
| canonical:ubuntu_linux | canonical ubuntu linux | eq | 15.10 |
Related
ubuntucve
ubuntucve
CVE-2015-8222
2015-11-17 00:00:00
prion
prion
Code injection
2015-11-17 15:59:00
nvd
nvd
CVE-2015-8222
2015-11-17 15:59:24
debiancve
debiancve
CVE-2015-8222
2022-10-03 16:15:59
cvelist
cvelist
CVE-2015-8222
2022-10-03 16:15:59
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2015-8222