Vulnerability in Canonical Lxcfs

CVE-2015-1342

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) updating a cgroup.

EPSS: 0.005 (38.0th percentile) — read the EPSS interpretation.

Affected products

Canonical Lxcfs
Canonical Ubuntu_linux — versions 15.04, 15.10
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

security@ubuntu.com (x_refsource_CONFIRM, Exploit)
security@ubuntu.com (x_refsource_CONFIRM)
security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)