Vulnerability in Linuxcontainers Lxc
CVE-2015-1335
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
EPSS: 0.005 (37.0th percentile) — read the EPSS interpretation.
Affected products
- Linuxcontainers Lxc — versions 1.1.0, 1.1.1, 1.1.2
- Canonical Ubuntu_linux — versions 14.04, 15.04
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (vendor-advisory, x_refsource_FEDORA)
- security@ubuntu.com (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
- security@ubuntu.com (vendor-advisory, x_refsource_DEBIAN)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (vdb-entry, x_refsource_BID)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (mailing-list, x_refsource_MLIST)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)
- security@ubuntu.com (vendor-advisory, x_refsource_FEDORA)