7 matches found
EUVD-2022-3203
Malicious code in bioql PyPI...
GHSA-8MPQ-FMR3-6JXV LXD vulnerable to Race Condition
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice. Specific Go Packages Affected...
LXD vulnerable to Race Condition
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice. Specific Go Packages Affected...
CVE-2015-1340
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice...
CVE-2015-1340 chmod race in doUidshiftIntoContainer
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice...
CVE-2015-1340: Concurrent Execution using Shared Resource with Improper Synchronization
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice...
PT-2019-7169
Name of the Vulnerable Software and Affected Versions LXD versions prior to 0.19-0ubuntu5 Description The issue arises from a race condition between chown and chmod operations during a container filesystem shift. This could allow an attacker to change the mode of any file on the system, rather th...