CVE-2016-1581

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors...

CVE-2016-1581

CVE-2016-1581 : LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop-based ZFS pool, enabling local users to copy and read data from arbitrary containers via unspecified vectors. Root cause: insecure permissions on the zfs.img file during ZFS pool setup...

CVE-2016-1582

CVE-2016-1582 concerns LXD before 2.0.2, where switching an unprivileged container to privileged mode incorrectly sets permissions. This allows a local user to access arbitrary world-readable paths in the container directory via unspecified vectors. The provided documents confirm the affected pro...

CVE-2016-1582

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors...

CVE-2016-1581

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors...

CVE-2016-1582

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors...

CVE-2016-1581

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors...

CVE-2016-1582

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors...

CVE-2016-1581: Improper Access Control

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors...

CVE-2016-1582: Exposure of Sensitive Information to an Unauthorized Actor

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors...

Ubuntu 16.04 LTS : LXD vulnerabilities (USN-2988-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2988-1 advisory. Robie Basak discovered that LXD incorrectly set permissions when setting up a loop based ZFS pool. A local attacker could use this issue to copy and read...

Ubuntu: Security Advisory (USN-2988-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2988-1: LXD vulnerabilities

Robie Basak discovered that LXD incorrectly set permissions when setting up a loop based ZFS pool. A local attacker could use this issue to copy and read the data of any LXD container. CVE-2016-1581 Robie Basak discovered that LXD incorrectly set permissions when switching an unprivileged contain...

UBUNTU-CVE-2016-1581

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors...

CVE-2016-1582

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors...

CVE-2016-1581

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors...

PT-2016-4872

Name of the Vulnerable Software and Affected Versions LXD versions prior to 2.0.2 Description The issue allows local users to copy and read data from arbitrary containers due to world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop-based ZFS pool. Recommendations For versions...

PT-2016-4873

Name of the Vulnerable Software and Affected Versions LXD versions prior to 2.0.2 Description The issue allows local users to access arbitrary world-readable paths in the container directory due to improper permission setting when switching an unprivileged container into privileged mode...

Ubuntu lxd package mode error vulnerability

The Ubuntu lxd package is a Linux Container Daemon OpenStack working environment package developed by Canonical UK and the Ubuntu Foundation. A security vulnerability exists in the lxd-unix.socket systemd unit file in versions of the Ubuntu lxd package prior to 0.20-0ubuntu4.1. Since the program...

CVE-2015-8222

The lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world-readable permissions for /var/lib/lxd/unix.socket, which allows local users to gain privileges via unspecified vectors...