LXC vulnerability

2014-02-1200:00:00

ubuntu.com

6.2 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Releases

Ubuntu 13.10

Packages

lxc - Linux Containers userspace tools

Details

Florian Sagar discovered that the LXC sshd template set incorrect mount
permissions. An attacker could possibly use this flaw to cause privilege
escalation on the host.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchlxc-templates< 1.0.0~alpha1-0ubuntu14.1UNKNOWN
Ubuntu13.10noarchliblxc0< 1.0.0~alpha1-0ubuntu14.1UNKNOWN
Ubuntu13.10noarchlxc< 1.0.0~alpha1-0ubuntu14.1UNKNOWN
Ubuntu13.10noarchlxc-dbg< 1.0.0~alpha1-0ubuntu14.1UNKNOWN
Ubuntu13.10noarchlxc-dev< 1.0.0~alpha1-0ubuntu14.1UNKNOWN
Ubuntu13.10noarchpython3-lxc< 1.0.0~alpha1-0ubuntu14.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.10	noarch	lxc-templates	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN
Ubuntu	13.10	noarch	liblxc0	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN
Ubuntu	13.10	noarch	lxc	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN
Ubuntu	13.10	noarch	lxc-dbg	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN
Ubuntu	13.10	noarch	lxc-dev	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN
Ubuntu	13.10	noarch	python3-lxc	< 1.0.0~alpha1-0ubuntu14.1	UNKNOWN