7 matches found
CVE-2017-18641
In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...
EUVD-2018-18308
Malware in sbrugna...
EUVD-2016-9488
Malware in sbrugna...
Ubuntu 18.04 LTS : LXC vulnerability (USN-3730-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3730-1 advisory. Matthias Gerstner discovered that LXC incorrectly handled the lxc-user-nic utility. A local attacker could possibly use this issue to open arbitrary files. Tenabl...
Ubuntu 14.04 LTS : LXC vulnerability (USN-3375-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3375-1 advisory. It was discovered that LXC incorrectly handled the TIOCSTI ioctl. An attacker could possibly use this issue to escape LXC containers. Tenable has extracted the...
CVE-2013-6441
The lxc-sshd template templates/lxc-sshd.in in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file...
Ubuntu 13.10 : lxc vulnerability (USN-2104-1)
Florian Sagar discovered that the LXC sshd template set incorrect mount permissions. An attacker could possibly use this flaw to cause privilege escalation on the host. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory...