Lucene search

K
mageiaGentoo FoundationMGASA-2014-0102
HistoryFeb 26, 2014 - 10:23 p.m.

Updated lxc packages fix security vulnerability

2014-02-2622:23:25
Gentoo Foundation
advisories.mageia.org
6

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

Florian Sagar discovered that the LXC sshd template set incorrect mount permissions. An attacker could possibly use this flaw to cause privilege escalation on the host (CVE-2013-6441).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchlxc< 0.8.0-1.2lxc-0.8.0-1.2.mga3
Mageia4noarchlxc< 0.9.0-5.1lxc-0.9.0-5.1.mga4

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%