Vulnerabilities (CVE)

Filtered by vendor Linuxcontainers Subscribe
Filtered by product Lxc
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-1331 1 Linuxcontainers 1 Lxc 2019-05-31 4.9 MEDIUM N/A
lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.
CVE-2015-1334 1 Linuxcontainers 1 Lxc 2019-05-31 4.6 MEDIUM N/A
attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label.
CVE-2015-1335 2 Canonical, Linuxcontainers 2 Ubuntu Linux, Lxc 2019-05-31 7.2 HIGH N/A
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
CVE-2013-6441 1 Linuxcontainers 1 Lxc 2014-02-18 7.2 HIGH N/A
The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.