Skip to main content

Lxc CVE-2015-1331

MEDIUM
Improper Link Resolution Before File Access (CWE-59)
2015-08-12 security@ubuntu.com
Information Disclosure Lxc
4.9
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
4.9 MEDIUM
AV:L/AC:L/Au:N/C:N/I:C/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:N/C:N/I:C/A:N
Attack Vector
Local
Attack Complexity
Low
Confidentiality
None
Integrity
C
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 12, 2015 - 14:59 cve.org
MEDIUM 4.9

DescriptionCVE.org

lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.

AnalysisAI

lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*. Rated medium severity (CVSS 4.9), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-59. lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*. Affected products include: Linuxcontainers Lxc.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Lxc

View all
CVE-2013-6441 HIGH POC
7.2 Feb 14

The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/
CVE-2016-8649 CRITICAL
9.1 May 01

lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inh
CVE-2016-10124 HIGH
8.6 Jan 09

An issue was discovered in Linux Containers (LXC) before 2016-02-22. Rated high severity (CVSS 8.6), this vulnerability

CVE-2015-1335 HIGH
7.2 Oct 01

lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinemen
CVE-2015-1334 MEDIUM
4.6 Aug 12

attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape

CVE-2017-5985 LOW
3.3 Mar 14

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on

CVE-2018-6556 LOW
3.3 Aug 10

lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. Rated low severity

Same weakness CWE-59 – Improper Link Resolution Before File Access

View all
CVE-2015-1130 HIGH POC
7.8
CVE-2026-41091 HIGH POC
7.8
CVE-2016-6664 HIGH POC
7.0
CVE-2025-60710 HIGH POC
7.8
CVE-2024-57728 HIGH POC
7.2
CVE-2025-21391 HIGH
7.1
CVE-2025-48384 HIGH
8.0
CVE-2024-28189 CRITICAL POC
10.0

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2015-1331 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy