Lucene search
Veracode Vulnerability DatabaseVERACODE:4000HistoryApr 27, 2017 - 7:47 a.m.
Information Disclosure
2017-04-2707:47:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.0004 Low
EPSS
Percentile
5.1%
github.com/lxc/lxd is vulnerable to information disclosure. This is because it uses world-readable permissions for /var/lib/lxd/zfs.imgwhen setting up a ZFS pool. Using this flaw local users can read and copy data from arbitrary containers.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/lxc/lxd | eq | HEAD | |
| github.com/lxc/lxd | le | lxd-0.27 |
Related
cve
cve
CVE-2016-1581
2016-06-09 16:59:01
cvelist
cvelist
CVE-2016-1581
2016-06-09 16:00:00
debiancve
debiancve
CVE-2016-1581
2016-06-09 16:59:01
prion
prion
Code injection
2016-06-09 16:59:00
nvd
nvd
CVE-2016-1581
2016-06-09 16:59:01
ubuntucve
ubuntucve
CVE-2016-1581
2016-05-31 00:00:00
nessus
nessus
Ubuntu 16.04 LTS : LXD vulnerabilities (USN-2988-1)
2016-06-01 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2988-1)
2016-06-01 00:00:00
ubuntu
ubuntu
LXD vulnerabilities
2016-05-31 00:00:00