2 matches found
CVE-2015-1340
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice...
8.1CVSS7.4AI score0.00896EPSS
SaveExploits0References1
Design/Logic Flaw
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice...
6.8CVSS6.8AI score0.00896EPSS
SaveExploits0References1
20