7 High
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.0%
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker’s choice.
[
{
"product": "LXD",
"vendor": "Ubuntu",
"versions": [
{
"lessThan": "0.19-0ubuntu5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]
7 High
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.0%