CVE-2015-1340

CVE-2015-1340 describes a TOCTOU race in LXD’s container path handling: an unsafe chmod in doUidshiftIntoContainer() that races with Filepath.Walk(), allowing a symlink created in the window to let an attacker set arbitrary file modes. Affected: LXD prior to 0.19-0ubuntu5. Impact: potential modif...