33 matches found
Design/Logic Flaw
LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by 1 querying or 2 updating a cgroup...
CVE-2015-1342
LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by 1 querying or 2 updating a cgroup...
CVE-2015-1342
LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by 1 querying or 2 updating a cgroup...
CVE-2015-1344
The CVE-2015-1344 issue affects LXCFS (lxcfs.c: do_write_pids) prior to version 0.12, where improper permission checks allow a local attacker to gain privileges by writing a pid to the tasks file. Documented in multiple sources (NVD/CVE-2015-1344, CNVD-2015-07989, Ubuntu USN/UBUNTU_USN updates) w...
CVE-2015-1342
LXCFS prior to 0.12 exposes a local privilege escalation risk due to failure to properly enforce directory escapes when querying or updating a cgroup. The issue is consistently described across multiple sources (CNVD-2015-07988, NVD CVE-2015-1342 entries, and Ubuntu/Debian advisories), stating th...
CVE-2015-1344
The dowritepids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions, which allows local users to gain privileges by writing a pid to the tasks file...
CVE-2015-1344
The dowritepids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions, which allows local users to gain privileges by writing a pid to the tasks file...
CVE-2015-1342
LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by 1 querying or 2 updating a cgroup...
Ubuntu 15.04 / 15.10 : lxcfs vulnerabilities (USN-2813-1)
It was discovered that LXCFS incorrectly enforced directory escapes. A local attacker could use this issue to possibly escalate privileges. CVE-2015-1342 It was discovered that LXCFS incorrectly checked certain permissions. A local attacker could use this issue t possibly escalate privileges...
Ubuntu: Security Advisory (USN-2813-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2813-1: LXCFS vulnerabilities
It was discovered that LXCFS incorrectly enforced directory escapes. A local attacker could use this issue to possibly escalate privileges. CVE-2015-1342 It was discovered that LXCFS incorrectly checked certain permissions. A local attacker could use this issue t possibly escalate privileges...
