4 matches found
GHSA-8MPQ-FMR3-6JXV LXD vulnerable to Race Condition
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice. Specific Go Packages Affected...
8.1CVSS7.9AI score0.00896EPSS
SaveExploits0References6
20