CVE-2016-8649

2017-05-0106:08:00

redhat

www.cve.org

AI Score

9.1

Confidence

High

EPSS

0.004

Percentile

72.4%

JSON

lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host’s /proc, to access the rest of the host’s filesystem via the openat() family of syscalls.

CNA Affected

[
  {
    "product": "LXC before 1.0.9 and 2.x before 2.0.6",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "LXC before 1.0.9 and 2.x before 2.0.6"
      }
    ]
  }
]