Vulnerability in Canonical Lxcfs
CVE-2015-1344
The do_write_pids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions, which allows local users to gain privileges by writing a pid to the tasks file.
EPSS: 0.004 (30.2th percentile) — read the EPSS interpretation.
Affected products
- Canonical Lxcfs
- Canonical Ubuntu_linux — versions 15.04, 15.10
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)
- security@ubuntu.com (x_refsource_CONFIRM)